Senior Threat Hunter - Digital Crime Operations(Global Security)

What is the Opportunity?

RBC’s Digital Crime Operations is seeking a Senior Threat Hunter to join our global efforts in identifying and mitigating sophisticated threats targeting our clients and digital assets.

In this role you will protect RBC's brand integrity, investigate malicious threats, and coordinate incident response across applications and digital infrastructure. This role combines threat research, SOC/SIEM and security automation to combat evolving cyber threats and social engineering attacks.

As part of our Global Cyber Security group, you’ll partner with a team of security experts, researchers, and innovators to disrupt digital crime using next-generation detection capabilities and solutions.

What will you do?

• Conduct in-depth threat investigations using SIEM tools, SQL queries, and data analytics

• Perform forensic analysis on suspicious activities, malware indicators, and unauthorized access attempts

• Develop Threat Hunting Capabilities: Design and implement advanced detection capabilities and hunt scenarios to identify threats targeting RBC’s clients and our digital properties.

• Utilization of cutting-edge frontier models to investigate and mitigate the latest threats (e.g., phishing, smishing, malware) and operationalize hunting scenarios for real-time detection and prevention.

• Web Application Security Hunting: Leverage web application security expertise to analyze live traffic for vulnerabilities and attack vectors.

• Methodology Enhancement: Collaborate with global teams to refine Digital Crime threat hunting methodologies and strategies, ensuring alignment with evolving threat landscapes.

• Data-Driven Insights: Assess security data across multiple platforms, conduct gap analyses, and optimize tool configurations to capture indicators of attacks.

• Identify creative ways to detect novel and existing threats by analyzing Tactics, Techniques, and Procedures (TTPs) of threat actors.

• Manage phishing inbox and coordinate takedowns of malicious websites

• Document threat actor communication patterns and architectural impacts

What do you need to succeed?

Must-have:

• 5+ years experience in SOC, SIEM, or threat investigation, or transferable security field

• Experience monitoring and investigate phishing attempts, malicious impersonation, and web application threats

• Experience conducting ad hoc threat investigations using SIEM tools, firewall logs, and data analytics

• Deep expertise in adversary TTPs and demonstrated success in mitigating threats.

• Technical proficiency: Hands-on experience with Python/SQL for data analysis, automation, and tool development.

• Proven ability to dissect complex problems, drive innovative solutions, and communicate insights to technical and executive stakeholders.

• Collaborative mindset: Exceptional teamwork skills for cross-functional projects in a fast-paced, global environment.

Nice-to-Have:

• Experience with big data platforms (ELK, Splunk, Hadoop) for security analytics.

• Knowledge of low-level systems (OS internals, CPU architectures) and exploit development.

• Industry certifications (e.g., CISSP, CEH, OSCP)
   

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

•   A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation

•   Ability to make a difference and lasting impact

•   Work in a dynamic, collaborative, progressive, and high-performing team

•   Opportunities to do challenging work

•   Opportunities to take on progressively greater accountabilities

#LI-POST

Job Skills

Analytical Thinking, Anomaly Detection, Consulting, Cybersecurity, Cyber Threat Hunting, Data Analysis, Incident Response, Information Security, Security Research, Threat and Vulnerability Management, Threat Detection, Threat Mitigation, Threat Modeling, Web Applications

Additional Job Details

16 YORK ST:TORONTOTorontoCanada37.5Full timeTECHNOLOGY AND OPERATIONSRegularSalaried2026-09-162026-09-30

Note: Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.

RBC is presently inviting candidates to apply for this existing vacancy. Applying to this posting allows you to express your interest in this current career opportunity at RBC. Qualified applicants may be contacted to review their resume in more detail.