Senior Incident Response Analyst - RBC, Toronto

About this opportunity

The Senior Incident Response Analyst will serve as the primary point of contact for Security Operations Centre management regarding security incidents as part of Blue team operations. You will support team members with critical incidents impacting RBC users, systems, infrastructure, and resources. Discover exciting RBC careers and administration jobs TORONTO while playing a key role in safeguarding RBC through detailed investigations, coordinating remediation efforts across multiple teams, and driving security incidents to timely and effective resolution while prioritizing accuracy and thoroughness. In this role, after-hours on-call support on a rotational basis is required.

Day-to-day

As part of the global security team, you will handle critical incident management and response tasks daily:

• Global accountability to respond to critical security incidents/events providing accurate and timely reporting to Global Security Leadership.
• Provide 24/7 support for security incidents impacting mission critical business and IT infrastructure, including supporting global incident management and response, remediation, and reporting.
• Perform log review and analysis, examining both direct and collector-sourced logs.
• Assess the effectiveness of secondary security controls and determine the scope, impact, and urgency of cyber incidents.
• Address common attack vectors, particularly email based threats (phishing, malicious links, software installation).
• Collaborate with DevOps and other technical teams to execute complex remediation activities, including software patching and system re-imaging.
• Provide postmortem reporting for leadership detailing security vulnerabilities, technology gaps, shortcomings or miscellaneous security issues.
• Conduct distributed security incident reviews with teams as determined by management.
• Responsible for driving to resolution security incidents in a timely and effective manner.
• Maintain timely communication with the Computer Security Incident Response Team (CSIRT) extended teams.
• Ensure global compliance with Enterprise standards regarding security incident response and related findings.
• Drive security incidents to timely and effective resolution while prioritizing accuracy over speed.

Requirements

To qualify for these RBC jobs TORONTO, candidates must meet the following mandatory education and experience criteria, along with preferred nice-to-have assets:

• Bachelor's degree in Computer Science, IT, or related discipline.
• 2+ years of cyber security incident response experience / Blue Team experience.
• Demonstrated experience conducting investigations for security-related events in a complex Incident Management or Security Operations Center environment.
• Advanced log analysis and SIEM query capabilities.
• Experience investigating security incidents across complex network environments.
• Strong operating system platform knowledge: Windows, Mac, UNIX, and Linux.
• Excellent written and verbal communication skills.
• Ability to work effectively across multiple teams and departments.
• Thorough understanding of Security Information and Incident Management methodologies.
• Strong problem solving and analytical skills.
• Information security certifications (CISSP, GCIA, GCIH, GREM, CEH) are nice to have.
• Malware analysis and digital forensics experience.
• Penetration testing experience or adjacent security testing background.
• Vulnerability assessment experience.

Benefits

Working at RBC offers a dynamic environment with comprehensive rewards to support your professional growth:

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable.
• Leaders who support your development through coaching and managing opportunities.
• Ability to make a difference and lasting impact.
• Work in a dynamic, collaborative, progressive, and high-performing team.
• Opportunities to do challenging work.
• Opportunities to take on progressively greater accountabilities.