Information Security Analyst I (US) Cybersecurity Incident & Forensics

$57,000 - $99,000/Yr

TD Bank - Charlotte, NC

Full-time - Entry Level

Charlotte, NC

10,001+ employees

Credit Intermediation and Related Activities

About the position

The Information Security Analyst I role at TD Bank focuses on supporting Cybersecurity Events, Incidents, and Digital Forensics. The position involves working as part of a team in Threat Defense Operations to mitigate risks and protect the bank's assets. The analyst will engage in root cause analysis, contribute to security management strategies, and ensure compliance with internal policies and regulatory guidelines. This role is essential for enhancing the bank's cybersecurity posture and involves collaboration with various stakeholders.

Responsibilities

• Guide partners on a broad range of technology throughout investigations.
• Support Cybersecurity Incidents and Cybersecurity Events.
• Work well with other analysts to perform root cause analysis.
• Collect indicators and escalate findings for containment and recovery.
• Contribute to the definition, development, and oversight of a global security management strategy and frameworks.
• Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging technology and security threats against TDBG's business.
• Contribute to development of ongoing operational enhancements for Cybersecurity including alerting, monitoring, and detection across multiple security domains.
• Adhere to internal policies and procedures, technology control standards, and applicable regulatory guidelines.
• Contribute to the review of internal processes and activities and assist in identifying potential opportunities for improvement.
• Adhere to, advise, oversee, monitor and enforce enterprise frameworks and methodologies that relate to technology controls/information security activities.
• Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.

Requirements

• Bachelor's degree preferred.
• Information security certification/accreditation an asset.
• 2-3 years of relevant experience.

Nice-to-haves

• Familiarity with IT security and Incident Management practices across multiple domains.
• Knowledge of basic scripting skills, can read data structures and software binary code.
• Familiarity with Incident Management and Cybersecurity protection tooling and technologies (ex. SIEM, EDR, XDR, Firewall, WAF).
• Strong desire to learn within Information Technology (IT) Information Security (IS) and Cybersecurity.
• Ability to support and drive change for technology controls and information security projects, the business, organization, and outside vendors.
• Willing to continue their cybersecurity education and remain current in the field.
• Must have solid knowledge in all eight cybersecurity domains.
• Can demonstrate hands-on experience working a cybersecurity incident.
• Must have working experience with both Windows and Linux operating systems.
• Should have previous experience conducting incident response work in any of the following - Information Security, Threat Intelligence, Information Technology or Cybercrime cases.

Benefits

• Base salary and variable compensation/incentive awards.
• Health and well-being benefits.
• Savings and retirement programs.
• Paid time off (including Vacation PTO, Flex PTO, and Holiday PTO).
• Banking benefits and discounts.
• Career development opportunities.
• Reward and recognition programs.