Royal Bank of Canada

Come Work with Us!

At RBC, our culture is deeply supportive and rich in opportunity and reward. You will help our clients thrive and our communities prosper, empowered by a spirit of shared purpose.

Whether you’re helping clients find new opportunities, developing new technology, or providing expert advice to internal partners, you will be doing work that matters in the world, in an environment built on teamwork, service, responsibility, diversity, and integrity.

Job Title

Principal Cybersecurity Threat Hunter (GCS)

Job Description

What is the opportunity?

The Digital Threat Hunting team is responsible for protecting RBCs brand, entities, reputation, and clients in the digital space, providing Digital Risk Protection services and Client Fraud Detection. The role will provide technical leadership for the team that is responsible for proactive and reactive identification and detection of threat actors, client related phishing/credential theft, malicious domain takedowns, banking malware research and client fraud attempts. The role is responsible to deliver these services and capabilities in a timely manner, to a variety of partners across the RBC enterprise and subsidiaries. This role will provide consultation and guidance to payment and fraud related partners in the organization and subsidiaries to decrease fraud loss, decrease brand repetitional risk and increase digital assets protection including all web facing applications exposed to clients.

You will be responsible for various products including in-house built solutions and will be accountable for their success and deliverables in terms of fraud loss avoidance, digital risk mitigation, and to deter fraud threat actors that are targeting RBC. We’re looking for an experienced technical leader that has the capability to guide a team of experts, to think outside of the box, ready to dive deep into technical details, is passionate about digital fraud, phishing, and has strong detective skills. The right candidate has experience in both phishing and fraud investigation, security operations, intelligence, and enjoys research and innovation.

What will you do?

• Be a senior technical resource as part of a team of digital threat hunting experts and be responsible for its success
• Lead multiple projects and strategize for the improvement and enhancement of the team service offering
• Develop and maintain relationships with peer teams and strategic clients
• Partner and collaborate with Fraud Operations and financial payment groups
• In conjunction with other members of the Global Cyber Security department, ensure the ongoing enhancement of threat hunting methodologies and overall strategy to detect and alert on digital threats targeting RBCs clients and assets
• Develop Digital Threat Hunting capabilities to detect threats targeting RBCs clients and digital properties
• Leverage application security skills to hunt for vulnerabilities and attack vectors in web applications and mobile traffic
• Find new and creative ways to detect threats by researching MITRE ATT&CK Tactics, Techniques and Procedures (TTPs) of known threat actors
• Operate various client compromise detection tools both vendor and in-house built solutions
• Research latest financial threats (such as phishing, smishing, financial malware), profile, and operationalize hunting scenarios to ensure real time detection and prevention
• Work closely with a team of data scientists and fraud operations partners, to create UBA/ML models focusing on digital risk protection capabilities
• Build knowledge of and stay current on developments in the digital fraud threat landscape to adapt investigation techniques

What do you need to succeed?

Must-have

• Proven experience in Digital Risk Protection services, and security operations preferably comprised of fraud investigation, security research, threat hunting, incident response, and application security
• Strong detective and outside of the box thinking mindset
• Strong communication and collaboration skills
• Understanding of common network models and protocols
• Knowledge of web application protocols and OWASP framework
• Experience with banking fraud and digital threats, e.g phishing, smishing, Banking Trojans
• Passion for cyber security and knowledge of financial threats, tools, tactics, techniques, and procedures

Nice-to-have

• Experience in Python, JavaScript, HTML and Web development
• Experience in analyzing and investigating large data sets
• Experience with core security technologies (e.g. SIEMs, web application firewalls, network and host intrusion prevention and detection systems, proxies, vulnerability scanners, and EDR solutions)

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable
• Leaders who support your development through coaching and managing opportunities
• Ability to make a difference and lasting impact
• Work in a dynamic, collaborative, progressive, and high-performing team
• Flexible work/life balance options
• Opportunities to do challenging work
• Opportunities to take on progressively greater accountabilities 

#techpj

#li-hybrid

Job Summary

The Digital Threat Hunting team is responsible for protecting RBCs brand, entities, reputation, and clients in the digital space, providing Digital Risk Protection services and Client Fraud Detection. The Senior Manager Role will manage a team that is responsible for proactive and reactive identification and detection of threat actors, client related phishing/credential theft, malicious domain takedowns, banking malware research and client fraud attempts. The role is responsible to deliver these services and capabilities in a timely manner, to a variety of partners across the RBC enterprise and subsidiaries. This role will provide consultation and guidance to payment and fraud related partners in the organization and subsidiaries to decrease fraud loss, decrease brand repetitional risk and increase digital assets protection including all web facing applications exposed to clients.

You will be responsible for various products including in-house built and will be accountable for their success and deliverables in terms of fraud loss avoidance, digital risk mitigation, and to deter fraud threat actors that are targeting RBC. We’re looking for an experienced Senior Manager that has the capability to lead a team of experts, to think outside of the box, ready to dive deep into technical details, is passionate about digital fraud, phishing, and has strong detective skills. The right candidate has experience in both phishing and fraud investigation, security operations, intelligence, and enjoys research and innovation.

Address:

TORONTO, Ontario, Canada

City:

CAN-ON-TORONTO

Country:

Canada

Work hours/week:

37.5

Employment Type:

Full time

Platform:

Technology and Operations

Job Type:

Regular

Pay Type:

Salaried

Posted Date:

2023-07-17

Application Deadline:

2023-09-29

Inclusion and Equal Opportunity Employment

At RBC, we embrace diversity and inclusion for innovation and growth. We are committed to building inclusive teams and an equitable workplace for our employees to bring their true selves to work. We are taking actions to tackle issues of inequity and systemic bias to support our diverse talent, clients and communities.

We also strive to provide an accessible candidate experience for our prospective employees with different abilities. Please let us know if you need any accommodations during the recruitment process.

Join our Talent Community

Stay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.

Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well-being of our clients and communities at rbc.com/careers.

Read Full Description