Cyber Threat Hunter

Requisition ID: 192987
Join a purpose driven winning team, committed to results, in an inclusive and high-performing culture.

The Role

Reporting to the Director of Cyber Threat Evaluation Center (CyTEC), the Cyber Threat Hunter role within the Cyber Threat Modelling team is responsible for identifying and assessing cyber-security and insider (people) threats posing potential risk and harm throughout Scotiabank globally. It is considered an entry level role to Cyber Threat Hunting operations. 

TheCyber Threat Hunter works as part of a pro-active investigation team that iteratively analyzes information across various data sources, facilitates establishing the likelihood of business impact, and helps to identify control enhancements to mitigate/isolate risk to business operations. They iteratively analyze information across various data sources, establishing the likelihood of business impact, and helps to identify control enhancements to mitigate/isolate risk to business operations. The Cyber Threat Hunter effectively collaborates with teammates, as they engage key stakeholders globally to develop, implement, and integrate the team’s continuous improvement capabilities to minimize the cost of performing pro-active investigations.

Some of the Key Accountabilities include : 

• Conduct threat hunting operations using analytics-driven, awareness-driven, and intelligence-driven analysis methodologies to detect and mitigate threats across the enterprise.
• Ensure that proper chain of custody is maintained and that all evidence recovery and collection methods are conducted, managed, and archived in a manner consistent to maintain preservation and protection of data and evidence in its original form.
• Recommend security solutions and controls to improve deficiencies identified during an investigation.
• Develop and implement processes and technologies to reduce costs and minimize business impacts during threat hunting engagements.
• Support, develop and maintain mechanisms for occurrence reporting and management threat hunting engagements.
• Adhere to industry standard principles, methodologies, and techniques when gathering, processing, handling and storing digital evidence.
• Ensure that proper chain of custody is maintained and that all evidence management techniques and methods are executed in a forensically sound manner consistent with proven industry standards.

What you will bring to succeed :

• Must have a strong approach to critical thinking, analytics, problem solving, creativity & detail orientation.
• Must be able to work extremely well under pressure while maintaining a high level of professionalism is critical.
• Current and working knowledge in Windows/Unix operating systems, mobile devices, PC hardware and PC networking.
• Working knowledge of major programming languages (python, objective C, C#, SQL, AQL, others).
• Knowledge and experience with data mining and analytics using relational databases (i.e. Microsoft SQL)
• Proficiency in technical writing & communication for a business audience in English.
• +2 years working experience in information/cyber security or related field; or a Bachelor's degree in an approved field from an accredited university and a minimum of 1 year of documented and relevant experience.
• Professional certifications and membership of associations in the field of information/cyber security preferred, but not required, such as: Global Information Assurance Certification (GIAC), Systems Security Certified Practitioner (SSCP).

#LI-Hybrid #Cyberatscotia

Location(s):  Canada : Ontario : Toronto 
Scotiabank is a leading bank in the Americas. Guided by our purpose: "for every future", we help our customers, their families and their communities achieve success through a broad range of advice, products and services, including personal and commercial banking, wealth management and private banking, corporate and investment banking, and capital markets.  
At Scotiabank, we value the unique skills and experiences each individual brings to the Bank, and are committed to creating and maintaining an inclusive and accessible environment for everyone. If you require accommodation (including, but not limited to, an accessible interview site, alternate format documents, ASL Interpreter, or Assistive Technology) during the recruitment and selection process, please let our Recruitment team know. If you require technical assistance, please click here. Candidates must apply directly online to be considered for this role. We thank all applicants for their interest in a career at Scotiabank; however, only those candidates who are selected for an interview will be contacted.