Information Security Analyst I (US) Cybersecurity Incident & Forensics

Work Location:

Mount Laurel, New Jersey, United States of America

Hours:

40

Pay Details:

$57,000 - $99,000 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. 

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Technology Solutions

Job Description:

We are looking for the right candidate to join a group of Cybersecurity Incident and Forensic first responders. You will support work on Cybersecurity Events, Incidents, and Digital Forensics. You will join in learning and growth as a team member in Threat Defense Operations with a focus on mitigating risks to protect TD. You may also minimally participate on projects of moderate to high complexity and provide complex reporting, analysis, and assessments at the functional, business line or enterprise level.

Meaningful work is fueled by meaningful performance and career development conversations with your manager.

Here are the essential job functions of this position:

· Guide partners on a broad range of technology throughout investigations.

· Support Cybersecurity Incidents and Cybersecurity Events

· Work well with other analysts to preform root cause analysis

· Collect indicators and escalate finding for containment and recovery

· Contribute to the definition, development, and oversight of a global security management strategy and frameworks

· Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging technology and security threats against TDBG’s business

· Contribute to development of on-going operational enhancements for Cybersecurity including alerting, monitoring, and detection across multiple security domains

· Adhere to internal policies and procedures, technology control standards, and applicable regulatory guidelines

· Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement

· Adhere to, advise, oversee, monitor and enforce enterprise frameworks and methodologies that relate to technology controls / information security activities

· Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.

Depth & Scope:

• Supports on a diverse range of tasks including research and analysis.

• Delivers on assigned initiatives, with regular guidance / direction from management.

• Possesses working knowledge of IT security and risk disciplines and practices.

• Demonstrates sound understanding of business, Bank standards, infrastructure, architecture and technology in related areas.

Education & Experience:

• Bachelor's degree preferred

• Information security certification / accreditation an asset

• 2-3 years of relevant experience

Preferred Qualifications:

• Familiarity of IT security and Incident Management practices across multiple domains

• Knowledge of basic scripting skills, can read data structures and software binary code

• Familiarity with Incident Management and Cybersecurity protection tooling and technologies (ex. SIEM, EDR, XDR, Firewall, WAF)

• Strong desire to learn within Information Technology (IT) Information Security (IS) and Cybersecurity

• Ability to support and drive change for technology controls and information security projects, the business, organization, and outside vendors

• Willing to continue their cybersecurity education and remain current in the field

• Must be eligible for employment under regulatory standards applicable to the position

• Must have solid knowledge in all eight cybersecurity domains

• Can demonstrate hand-on experience working a cybersecurity incident

• <