Tactical Operational Cyber Threat Intelligence Analyst

OVERVIEW

The Tactical/Operational Cyber Threat Intelligence Analyst plays a crucial role in providing tactical and operational cyber threat intelligence to support the organization’s security, fraud prevention, incident response, and risk management objectives. This position involves monitoring the evolving cyber threat landscape, identifying and assessing threats relevant to the organization and the financial services sector, and delivering timely intelligence support to the Incident Response Centre.

The ideal candidate will have a strong background in cyber threat intelligence or cybersecurity operations, with the ability to analyze and contextualize threat data from various sources. They will excel in producing clear and actionable intelligence products for both technical and non-technical stakeholders, while collaborating effectively with internal security teams and external partners to enhance cyber resilience.

Location: Toronto, ON (Hybrid)

Contract Length: Until April 30, 2027, with extension and FTE conversion possibilities

Hours: 9am-5pm ET, subject to change

Pay: T4 $40-43 / IC: $47-49

RESPONSIBILITIES

• Monitor, triage, and assess incoming cyber threat intelligence emails, alerts, notifications, and reporting from internal and external sources.
• Conduct continuous cyber event monitoring and provide timely escalation of credible threats, indicators, and incidents to the Incident Response Centre (IRC) and relevant stakeholders.
• Identify emerging threats, vulnerabilities, threat actors, campaigns, and trends that may impact the organization and its customers.
• Collect, correlate, and analyze threat intelligence to provide actionable insights supporting cyber defense, security operations, fraud prevention, and incident response activities.
• Assess threat actors, malware, ransomware activity, and adversary tactics, techniques, and procedures (TTPs) to determine potential business impact and risk exposure.
• Produce high-quality intelligence reports, threat advisories, alerts, briefings, and situational awareness products for technical and non-technical audiences.
• Support incident investigations by providing intelligence analysis, threat context, attribution insights, and indicators of compromise (IOCs).
• Develop and maintain threat actor profiles, attack trend analyses, and sector-specific intelligence assessments.
• Collaborate with Security Operations, Incident Response, Fraud, Vulnerability Management, and other cybersecurity teams to enhance detection, response, and mitigation capabilities.
• Participate in intelligence-driven investigations, threat hunting activities, and post-incident reviews to identify emerging risks and improve defensive measures.
• Engage with industry partners, information-sharing organizations, and external intelligence providers to gather and share relevant threat information.
• Brief stakeholders and leadership on significant cyber threats, risks, and recommended courses of action to support informed decision-making.
• Contribute to the ongoing improvement of cyber threat intelligence processes, intelligence requirements, monitoring practices, and reporting standards.

QUALIFICATIONS

• At least 2 years of experience in cyber threat intelligence or related fields such as cybersecurity operations and incident response.
• Strong understanding of threat actors, attack trends, vulnerabilities, and the financial sector threat environment.
• Ability to analyze and contextualize cyber threat data from multiple sources effectively.
• Excellent written, verbal, and presentation skills.
• Proven ability to produce clear, concise, and actionable intelligence products for diverse audiences.
• Strong analytical, critical thinking, and stakeholder engagement skills.

TECHNICAL SKILLS

• Experience with Splunk and threat intelligence platforms (TIPs) is preferred.

PREFERRED

• Previous experience in the financial industry or with specific organizations in the sector.
• Experience in the cybersecurity or critical infrastructure sector.
• Relevant postsecondary education.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status, or other non-merit factor. We are committed to creating a diverse and inclusive environment for all employees.