Information Security Specialist (DevSecOps)

Work Location

Toronto, Ontario, Canada

Hours

37.5

Line of Business

Technology Solutions

Pay Details

$114,000 - $136,800 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Job Requirements

• This role will be hands on and very technical – strong Python scripting ability – proficient in python.
• Experience with Jenkins and GitHub Actions/Workflows. Ability to build and automate security touchpoints within Jenkins and GitHub Workflows. Understanding of configuring and leveraging a CICD orchestration tool within an organization.
• Understanding of development methodologies and secure software development lifecycle.
• University Degree.
• Demonstrated ability to participate in projects of moderate to high complexity.
• Ability and commitment to serve as a subject matter expert on business‑specific, cross‑functional and enterprise initiatives.
• Readiness to participate in projects of moderate to high complexity and provide guidance around complex reporting, analysis, and assessments at the functional, business line or enterprise level.
• Developer experience and understanding of development processes with modern programming/scripting languages.
• Knowledge and understanding of application security testing (DAST, SAST, SCA, etc.).

It helps if you have:

• 7+ years of relevant experience within any of the following areas: Development, DevOps/DevSecOps, or Application Security.
• Ability to triage and review technical security vulnerabilities and findings.
• Information Security Certification / Accreditation.
• Firm commitment to staying informed and abreast of emerging security issues, industry trends etc.
• Advanced knowledge of one or more technology controls or security domains, disciplines, and practices.
• Experience with information security controls, policies, processes, and industry standards.
• Strong Application Security knowledge (OWASP Top Ten, CWEs, etc.)

Our Total Rewards Package

Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical, and mental well‑being goals. Total Rewards at TD includes a base salary, variable compensation, and several other key plans such as health and well‑being benefits, savings and retirement programs, paid time off, banking benefits and discounts, career development, and reward and recognition programs. Learn more