AI Detection Engineering Information Security Specialist; B3617
Job in
Toronto, Ontario, M5A, Canada
Listing for:
The Toronto-Dominion Bank (Canada)
Full Time
position
Listed on 2026-03-07
Job specializations:
-
IT/Tech
AI Engineer, Cybersecurity
Job Description & How to Apply Below
Position: AI Detection Engineering Information Security Specialist (B3617)
Description
:
We are seeking an experienced and technically proficient Information Security Specialist (L10) to lead CTD’s AI-driven detection engineering capability. This role owns the design, implementation, and operation of machine learning–enhanced detections across SIEM/XDR ecosystems, elevating alert fidelity and analyst productivity through automation, codified pipelines, and governed model lifecycle. You will partner with CSOC, CSIRT, Threat Hunting, and platform teams to deliver enterprise-scale detections that adapt to evolving threats, while mentoring L9 engineers and shaping CTD’s detection roadmap.
Key Responsibilities
AI Detection Engineering & Content Leadership
Design, build, and productionize ML/AI detections (e.g., anomaly detection, behavior models, graph analytics) for Microsoft Defender (MDI/MDE/MDO), Sentinel, Splunk, and related platforms; champion model quality, drift monitoring, and explainability.Establish feature pipelines and training/evaluation frameworks (offline/online) that support rapid iteration and safe rollout through CI/CD and detection-as-code workflows.Author and maintain reusable content libraries (rules, models, enrichers) aligned to MITRE ATT&CK and enterprise risk models; drive consistency and reusability across domains.Security Use Case Lifecycle (AI-Enhanced)
Own the end-to-end lifecycle for AI-enabled use cases: problem framing, data readiness, threat modeling, model selection, validation, deployment, tuning, and retirement; maintain auditable artifacts for governance.Integrate detections with XSOAR playbooks, enrichment services, and case management to enable automated triage/response where risk criteria are met.Program & Platform Contributions
Map AI use cases and threat models to convert high-value scenarios into AI-assisted detections; ensure MDI/XDR ↔ XSOAR synchronization and playbook readiness.Contribute to the detection platform vision (content libraries, testing harness, BAS integration, governance dashboards) to scale coverage and reduce time-to-detect.Qualifications:
7+ years in detection engineering, data science for security, proven delivery of production ML detections and MLOps pipelines.Deep expertise with SIEM/SOAR/XDR (e.g., Splunk, Sentinel, XSOAR, Microsoft Defender suite) and threat detection methodologies; hands-on with content engineering and model governance.Strong skills in Python (pandas, scikit-learn, PyTorch/Tensor Flow), Power Shell, and SQL/KQL; experience with feature engineering, cross-validation, A/B experiments, drift detection, and explainability.Familiarity with MITRE ATT&CK, kill-chain and threat modeling practices; ability to translate TTPs into signals, features, and labels.Demonstrated ability to work across technical and non-technical stakeholders; clear written/spoken communication; experience mentoring engineers and leading cross-functional initiatives.Preferred
Certifications:
CISSP, GIAC (GCIA, GCIH, GCED), Azure Data/AI (DP-100, AI-102), or equivalentWho We Are:
TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we deliver legendary customer experiences to over 27 million households and businesses in Canada, the United States and around the world. More than 95,000 TD colleagues bring their skills, talent, and creativity to the Bank, those we serve, and the economies we support.
We are guided by our vision to Be the Better Bank and our purpose to enrich the lives of our customers, communities and colleagues.
TD is deeply committed to being a leader in customer experience, that is why we believe that all colleagues, no matter where they work, are customer facing. As we build our business and deliver on our strategy, we are innovating to enhance the customer experience and build capabilities to shape the future of banking. Whether you’ve got years of banking experience or are just starting your career in financial services, we can help you realize your potential.
Through regular leadership and development conversations to mentorship and training programs, we’re here to support you towards your goals. As an organization, we…
Note that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
