Engineer II - Endpoint Protection Security

Work Location:

Toronto, Ontario, Canada

Hours:

37.5

Line of Business:

Technology Solutions

Pay Details:

$96,900 - $136,800 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Job Description:

Department Overview

The Protect Platform consists of teams across North America, whose mandate is to protect TD customers, colleagues and shareholders from cyber and financial crimes and fraud. Collectively, our businesses lead TD’s enterprise-wide fraud, cyber threat, and technology risk strategies, advance analytics capabilities, and drive operational efficiency to improve governance, oversight and collaboration between fraud management and other functions within the Bank.

Endpoint Protect is part of the broader Security Engineering team of the Protect Platform with the mandate to plan, evaluate, recommend, design, operationalize, and support a variety of security solutions. These solutions focus on protecting endpoints, which consist of servers and workstations, in compliance with enterprise and industry standards.

The results of the Engineer's work ensure that TD's endpoints are protected against the newest and most sophisticated cyber attacks.

Accountabilities & Deliverables

This senior-level role is accountable for the hands-on engineering, design, delivery, operational effectiveness, and continuous improvement of endpoint security capabilities across the enterprise. The successful candidate will combine deep technical expertise with the ability to provide technical leadership, coordinate and guide a small team of engineers, influence technical direction, and drive outcomes across multiple stakeholders and technology teams.

Security Engineering & Platform Ownership

• •Lead the design, implementation, and ongoing evolution of enterprise endpoint security capabilities, ensuring solutions are scalable, resilient, and aligned with security and business objectives.
• •Serve as a subject matter expert for endpoint protection technologies, including EDR, anti-malware, FIM, security automation, threat intelligence, and related security platforms.
• •Ensure endpoint security solutions are supported by appropriate operational processes, integrations, documentation, and governance to enable effective enterprise adoption and operations.
• •Drive platform maturity, operational excellence, and efficiency through automation, scripting, engineering best practices, and continuous improvement initiatives.

Solution Delivery & Strategic Initiatives

• •Lead or contribute to complex technical projects and initiatives by defining requirements, assessing risks, developing solution options, and delivering technology outcomes that meet business and security objectives.
• •Partner with architects, engineers, and technology stakeholders to evaluate current-state capabilities and develop strategic recommendations for future-state solutions.
• •Coordinate technical priorities, dependencies, risks, and stakeholder communications to support successful delivery of initiatives and progress against team objectives.

Stakeholder, Risk & Vendor Management

• •Build and maintain strong partnerships with Security Operations, Threat Intelligence, Red Team, Blue Team, Threat Hunting, and other technology teams to support enterprise security objectives.
• •Provide engineering expertise and consultation to governance, compliance, audit, operational risk, and regulatory stakeholders on matters related to endpoint security technologies and controls.
• •Support vendor engagements, technology evaluations, business case development, RFI/RFP activities, service reviews, and contract-related discussions.

Technical Leadership & Operational Support

• •Provide day-to-day technical leadership to a small team of engineers, coordinating technical work, providing guidance and mentorship, reviewing solution approaches, and helping ensure engineering priorities and deliverables are successfully executed.
• •Maintain awareness of emerging threats, technologies, and industry trends, continuously enhancing expertise and identifying opportunities to strengthen security capabilities.
• •Lead and support infrastructure changes, platform upgrades, and incident response activities, including participation in after-hours or weekend activities when required.

Job Requirements

This senior-level role requires extensive experience in hands-on endpoint security engineering, solution design, and technical leadership. The successful candidate will combine deep security expertise with the ability to lead complex technical initiatives, provide technical direction, coordinate and guide a small engineering team, and collaborate across technology and security teams to deliver secure, scalable solutions.

Technical Expertise

• •Extensive experience designing, implementing, and supporting enterprise endpoint security platforms and solutions, including Endpoint Detection and Response (EDR), anti-malware, file integrity monitoring, threat intelligence, security automation, and related security capabilities.
• •Examples of enterprise security platforms include CrowdStrike, Microsoft Defender, Qualys File Integrity Monitoring, Cortex XSOAR, or comparable technologies.

• •Strong systems administration, troubleshooting, scripting, automation, and performance analysis experience across Windows and Linux environments; macOS experience is an asset.
• •Strong understanding of application, endpoint, identity, infrastructure, and network security principles, including common security controls and enterprise technologies.

Architecture & Engineering

• •Experience designing and supporting security solutions within cloud and hybrid environments, including Microsoft Azure, AWS, or Google Cloud Platform.
• •Knowledge of modern technology and engineering practices, including containers, microservices, infrastructure as code, automation, DevSecOps, and cloud-native architectures.
• •Proven ability to troubleshoot and resolve complex application, infrastructure, and network security issues within large enterprise environments.

Leadership & Collaboration

• •Experience providing technical leadership to engineering teams, including coordinating work, mentoring engineers, reviewing technical approaches, resolving technical blockers, and helping drive engineering priorities to completion.
• •Experience leading cross-functional initiatives, driving technical decisions, managing risks and dependencies, and delivering outcomes across multiple teams.
• •Strong communication, stakeholder management, and relationship-building skills, with the ability to engage effectively with both technical and non-technical audiences.

Additional Qualifications

• •Familiarity with AI-enabled technologies and an understanding of security risks associated with artificial intelligence and large language models, including, but not limited to, prompt injection and data leakage.
• •Strong analytical and problem-solving abilities, with a demonstrated ability to learn independently, adapt to emerging technologies, and continuously expand technical expertise.

#li-tech

Who We Are:

TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores. Every day, we strive to make every interaction, product, and experience remarkably human and refreshingly simple for over