Cyber Detection Engineering Lead

Take a central role

The Bank of Canada has a vision to be “a leading central bank—dynamic, engaged and trusted—committed to a better Canada.” No other employer in the country offers you the unique opportunity to work at the very center of Canada’s economy, in a diverse and inclusive organization with significant impact on the economic and financial well-being of all Canadians. You will be challenged, energized and motivated to excel in an environment where we are reinventing central banking, renewing ways of doing business and reinforcing a culture of innovation.

Find out more about the next steps in our Recruitment process.

The team

Reporting to the Director, Cyber Security Monitoring and Response, you will join a highly impactful Cyber Security Operations Centre (CSOC) team with the mission to keep Canada’s economy safe & secure. You will strive to empower the team to be as effective as possible through the design, implementation, and lifecycle management of security analytics (detection use cases) within our Security Information Event Management (SIEM) solution.

Further – you will be provided with autonomy to make decisions and recommendations along with the opportunity to utilize state-of-the-art Enterprise Cyber Security Solutions and consistently learn as technology in the industry evolves.

What you will do

You will lead the Detection Engineering team to support the continued evolution and maturation of our detection engineering practice. As the lead, you will provide coaching, mentoring, technological expertise and help to influence our detection priorities. You will lead the team on detection priorities based on threat intelligence and research, providing strategic advice, and thought leadership on how to approach and evolve our current detection and monitoring capabilities.

In addition, you will:

Identify and prioritize cyber threats in coordination with the Cyber Threat Intelligence team
Prioritize SIEM detection activities
Design and maintain end point security capabilities and configurations to provide required logging and monitoring
Develop and perform threat emulation and automation to validate security analytics
Develop and implement security use case within our SIEM to detect prioritized threats
Provide technical leadership and support to the CSOC team
Enhance processes and procedures that support the CSOC team’s mission

What you need to succeed

You are a leader by example and have excellent communication and interpersonal skills which enables you to coach and provide appropriate feedback to your team members.

In addition, you have a strong understanding and/or experience in the following:

Offensive security capabilities and threat actor objectives including familiarity with the MITRE ATT&CK Framework, cyber threat intelligence, threat hunting, risk assessment and/or penetration testing.
Splunk as a SIEM tool and the creation of custom security analytics (use cases)
Windows operating system and how to secure it including Windows logging and telemetry sources (e.g. Windows logs, Sysmon, Procmon, ETW, etc.)
Network and operating system security features (e.g., Kerberos, Active Directory, Linux Auditd) including network security technologies (e.g., network firewalls, web proxies, Zeek)
Cyber security frameworks (e.g., MITRE ATT&CK, NIST SP 800-53) and the Cyber Kill Chain

Nice-to-have skills

Recent experience leading a team of Cyber Security Analysts/Developers and working with broad range of business stakeholders to help understand and reduce cyber risk.
Familiarity with risk assessment, vulnerability assessment strategies as well as web application security.
Previous experience in vulnerability assessment programs
Relevant cyber security Industry certifications such as CISSP, OSCP, GIAC, etc.

Your education and experience

The position requires a university degree/diploma in computer science or other relevant field along with 7+ years of experience within information security.

Any relevant combination of education and experience may be considered.

What you need to know

Language requirement: English and French essential (bilingual) with a minimum starting level of intermediate (level 3) in second official language. Training may be provided to help reach the required level of functional (level 4) in second official language.
Priority will be given to Canadian citizens and permanent residents
Security level required: Be eligible to obtain Secret
Please save a copy of the job poster. Once the closing date has passed, it will no longer be available.
In response to the COVID-19 pandemic and further to public health guidelines, preventative measures are being taken to ensure health and safety during the recruitment process. All interviews are conducted virtually.
The official title for this position is “Detection Engineering Lead ”

Hybrid Work Model

The Bank is moving towards a hybrid working model which allows employees to telework up to 50 percent of the time, balanced over a two-week period. Relocation assistance may be offered by the Bank.

Vaccination Policy

In response to the COVID-19 pandemic that was declared by the World Health Organization, the mandates issued by the federal government, and the direction provided by public health authorities, the Bank of Canada requires all new employees to be fully vaccinated prior to their start date.

Selected candidates will be asked to provide proof of vaccination status at the reference stage. Candidates who are unable to be vaccinated against COVID-19 and require an accommodation for a legitimate medical, religious or other human rights-based grounds will follow a seperate process.

Covid-19 Authorized Vaccines in Canada

We wish to thank all applicants for their interest and effort in applying for this position. Only candidates selected for interviews will be contacted.

What you can expect from us

This is a great opportunity to join a leading organization and be part of a high-performing team. We offer a competitive compensation and benefits package designed to meet your needs at every stage of your life and career. For more information on key benefits please visit A great deal to consider.

Salaries are based on qualifications and experience and typically range from $110,190 to $137,735 (job grade 19)
Depending on performance, you may be eligible for performance pay for successfully meeting (7 to 10% of your base salary) or for exceeding expectations (15% of your base salary). Exceptional performers who far exceed expectations may be eligible for higher performance pay.
Flexible and comprehensive benefits so you can choose the level of health, dental disability and life and/or accident insurance coverage that meets your needs
Extra vacation days (up to five each year) that you can purchase to add to your vacation entitlement
Indexed, defined-benefit pension

detection engineering jobs

Cyber Detection Engineering Lead