Security Analyst – Cyber Threat Intelligence (Toronto)

About the role

We are seeking a Security Analyst with a focus on cyber threat intelligence to join our Toronto team. The analyst will monitor, assess and report on emerging cyber threats, helping protect our clients and the broader financial services sector.

Key responsibilities

• Monitor, triage and assess incoming cyber threat intelligence emails, alerts and notifications from internal and external sources.
• Continuously monitor cyber events and promptly escalate credible threats, indicators and incidents to the Incident Response Centre and relevant stakeholders.
• Track the cyber threat landscape to identify emerging threats, vulnerabilities, threat actors, campaigns and trends affecting clients and the financial sector.
• Collect, correlate and analyse threat intelligence to produce actionable insights for cyber defence, security operations, fraud prevention and incident response.
• Assess threat actors, malware, ransomware activity and adversary tactics, techniques and procedures (TTPs) to determine business impact and risk exposure.
• Produce high‑quality intelligence reports, advisories, alerts and briefings for both technical and non‑technical audiences.
• Support incident investigations with intelligence analysis, threat context, attribution insights and indicators of compromise (IOCs).
• Develop and maintain threat‑actor profiles, attack trend analyses and sector‑specific intelligence assessments.
• Collaborate with Security Operations, Incident Response, Fraud, Vulnerability Management and other cybersecurity teams to enhance detection and mitigation capabilities.
• Engage with industry partners, information‑sharing organisations and external intelligence providers to gather and share relevant threat information.

Required profile

• Minimum 2 years of experience in cyber threat intelligence or related cybersecurity fields.
• Strong understanding of threat actors, attack trends, vulnerabilities and the financial sector threat environment.
• Ability to analyse and contextualise cyber threat data from multiple sources.
• Excellent written, verbal and presentation skills, with a proven ability to produce clear, concise intelligence products.
• Strong analytical, critical‑thinking and stakeholder‑engagement capabilities.

Required skills

• Splunk
• Threat Intelligence Platforms (TIPs)