Manager, Cyber Resilience & Offensive Security
Job description
About the role
EQ Bank is inviting applications for a Manager, Cyber Resilience & Offensive Security position based in Toronto. This role is centered on constructing threat based protection for digital banking across Canada through proactive and offensive minded initiatives. The successful hire will be responsible for designing detection patterns and providing advisory support to security oriented teams across the organization. This position requires structured collaboration and clear ownership of offensive security outcomes in a fast moving environment. The role emphasizes building robust testing methodologies that validate the effectiveness of defensive controls. You will work closely with technology and product teams to ensure security testing aligns with delivery objectives. The position also involves mapping adversary behaviors specific to financial services to ensure red team actions remain realistic and relevant. Leading incident simulations will exercise detection analytics and response coordination to improve organizational readiness.
Key facts
What you'll do
- Design proactive control testing roadmaps for financial platforms located in Toronto to validate security effectiveness.
- Establish offensive security experiments that validate detection logic under varied conditions and operational scenarios.
- Coordinate with technology squads to align security testing with product delivery timelines and business priorities.
- Map adversary behaviors to financial services environments to ensure red team actions reflect realistic threats and tactics.
- Lead incident simulations that exercise detection analytics, response processes, and coordination across security functions.
- Translate complex attack patterns into clear guidance for engineering and operations groups to enable remediation and hardening.
- Partner with external specialists to allow for comparison of methodologies and exchange of emerging observations and practices.
- Update defensive playbooks when new tactics appear in the threat landscape to maintain current defensive postures.
- Conduct threat modeling sessions to identify potential weaknesses in digital banking workflows and customer facing services.
- Support the development of security metrics that demonstrate the impact of offensive testing on overall risk reduction.
- Facilitate workshops with cross functional teams to build awareness of attack techniques and defensive options.
- Perform manual and automated assessments focused on the banking application landscape and supporting infrastructure.
- Monitor industry threat intelligence and adapt testing approaches based on evolving tactics used against financial institutions.
- Act as a subject matter expert for cyber resilience and offensive security topics within the organization and for stakeholders.
Requirements
- Canadian work authorization is mandatory for this role due to the location and data sensitivity.
- A minimum of three years handling security assessments within financial services contexts is required to ensure relevant experience.
- Hands on experience with red team operations and security validation practices is necessary for effective testing.
- Practical familiarity with common attack techniques and their impact on banking systems is required to design relevant scenarios.
- Comfort using scripting and command line tools to automate assessment activities is expected to improve efficiency.
- Understanding of financial data flows, privacy rules, and relevant compliance considerations is essential for informed decision making.
- Demonstrated ability to work independently and as part of a collaborative team in a matrixed organizational structure.
Nice to have
- Experience working directly with financial institutions and their technology vendors to understand unique integration challenges.
Practical notes
The role is defined as a challenge to standard risk models and operates as a fully remote friendly position centered in Toronto. Daily work centers on proactive defense and offensive security validation to improve the security posture of digital banking. This role suits individuals driven to reshape how banking works for Canadians and the businesses that power the economy through innovative security practices. The organization values challengers who ask better questions, push back on old assumptions, and seek better ways forward in security delivery.
EQ Bank has been operating since 1970 and has built a long standing reputation in the financial sector. The organization serves nearly 4 million Canadians from coast to coast through a wide variety of financial services. These services include banking, lending, trust, and credit union solutions that meet diverse customer needs. The company challenges conventions of traditional banking with smarter, faster, and more connected financial experiences that leverage technology. The people behind this effort are the primary drivers of progress and innovation within the organization. If you are driven to help reshape digital banking and contribute to a challenger environment, this opportunity represents a significant next step in your career. The position offers the chance to work on impactful security initiatives that influence the direction of digital banking protection in Canada. Applicants should be prepared to engage with complex problems and contribute creative solutions on a regular basis. The successful candidate will join a team that values curiosity, rigor, and continuous improvement in security practices.