Find work in Canada.

329,786 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Save this search

Added 8 mins ago
Compliance Lead (Remote)
Geotab
Canada
Full-time
Geotab ® is a global leader in IoT and connected transportation and certified “Great Place to Work™.” We are a company of diverse and talented individuals who work together to help…
Added 8 mins ago
Assistant Operations Manager - Secure Facility
GardaWorld
Surrey, BC
Full-time
GardaWorld is growing - and we’re looking for a strong operational leader to join our Security Services team in Vancouver!
Added 8 mins ago
Director of Growth Marketing
D3 Security
Vancouver, BC · Greater Vancouver, BC
Full-time
This role requires a disciplined execution leader who is highly skilled at delegating work, establishing clear ownership and deadlines, following up consistently, and holding team members…
Added 8 mins ago
Mobile Maintenance Technician
CBRE
Toronto, ON
Full-time
…management solutions to our clients. We focus on empowering our team with a high-level of downstream accountability, resulting in an agile and efficient service…
Added 8 mins ago
People Insights Visier Platform Manager, Deloitte Global People
Deloitte
Toronto, ON
Full-time
The People Insights team turns workforce data into clear, actionable insights that help leaders make better decisions about talent, performance, and organizational health. We combine…
Added 8 mins ago
Lead Angular Developer (Data Security Platform)
OpenText
Richmond Hill, ON
Full-time
As a global leader in secure information management, OpenText empowers businesses to stay ahead of the ever-evolving cyber threats. Our Cybersecurity Enterprise portfolio is formidable,…
Added 9 mins ago
Patrol Avalanche Forecasting Coordinator
Red Mountain Resort
Rossland, BC
Temporary
As the leader of the Avalanche Forecasting Team you will support all aspects of RED Mountain Resorts operational avalanche forecasting and mitigation program while also supporting…
Added 9 mins ago
Primary Care Paramedic
Medavie
Rose Valley, SK · SK Rose Valley
Part-time
Medavie Health Services is a national leader in primary health care solutions and the largest contracted provider of emergency management services in Canada. Together with Medavie Blue…
Added 9 mins ago
Primary Care Paramedic
Medavie
Wynyard, SK · SK Wynyard
Part-time
Medavie Health Services is a national leader in primary health care solutions and the largest contracted provider of emergency management services in Canada. Together with Medavie Blue…
Added 9 mins ago
Primary Care Paramedic
Medavie
Wadena, SK · SK Wadena
Part-time
Medavie Health Services is a national leader in primary health care solutions and the largest contracted provider of emergency management services in Canada. Together with Medavie Blue…
Added 9 mins ago
Maintenance Team Leader - Night Shift (Sun - Thurs 11:00 pm to 7:00 am)
Griffith Foods
Toronto, ON
Full-time
As a Maintenance Team Leader, your responsibilities will include:
Added 23 mins ago
Family Service Social Worker- F/T (Langley)-1933
Fraser Valley Aboriginal Children and Family Services Society
Langley (District), BC
Full-time
Reporting to a Delegated Team Leader, social workers will work within the communities to provide culturally appropriate, and responsive, community-based services. Services will fall within…
Added 23 mins ago
Traffic Plan Designer
The Universal Group
Langley (District), BC · Langley, British Columbia
Full-time
…thrive in dynamic settings and want to be part of a growing team and company, we want to hear from…
Added 23 mins ago
Environmental, Health & Safety Leader
C.H. Guenther & Son
Brampton, ON
Full-time
The EHS Leader will lead & facilitate the integration of EHS processes, standard operating procedures/policies, assists in administering programs and training in compliance with OSHA/EPA,…
Added 37 mins ago
Canada Initiative Leader
Edward Jones
Mississauga, ON
$99,900 to $170,000 CAD / year
Full-time
As an Initiatives Leader within Canada Operations, this role is accountable for the end-to-end execution and successful delivery of complex, mid-to-large scale strategic initiatives,…
Added 37 mins ago
Coordinateur / Coordinatrice RH
Newrest
Dorval, QC
$60,000 to $65,000 CAD / year
Full-time
Newrest, a world leader in the catering and business services sector, is looking for a motivated HR Coordinator to join our dynamic team. If you are passionate about human resources and…
Added 37 mins ago
Engineering Director, Nuclear
WSP in Canada
Whitby, ON
Full-time
Build the Future with Us – This is your chance to be part of a team that’s shaping Canada’s nuclear infrastructure. This pivotal role will spearhead the nuclear division, bringing a wealth…
Added 37 mins ago
Engineering Director, Nuclear
WSP in Canada
Mississauga, ON
Full-time
Build the Future with Us – This is your chance to be part of a team that’s shaping Canada’s nuclear infrastructure. This pivotal role will spearhead the nuclear division, bringing a wealth…
Added 37 mins ago
Engineering Director, Nuclear
WSP in Canada
Toronto, ON
Full-time
Build the Future with Us – This is your chance to be part of a team that’s shaping Canada’s nuclear infrastructure. This pivotal role will spearhead the nuclear division, bringing a wealth…
Added 37 mins ago
VP, Product, Marketing & Strategic Partnerships, Sun Life Global Investments
Sun Life
Toronto, ON
Full-time
At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring,…
Added 37 mins ago
Staff Platform Engineer - Materia AI
Thomson Reuters
Toronto, ON
Full-time
Are you excited about building cloud-native platforms that power Agentic workloads? Join a dynamic and highly skilled team at Thomson Reuters, where we combine the agility and innovation of…
Added 37 mins ago
Engineering Director, Nuclear
WSP in Canada
Vaughan, ON
Full-time
Build the Future with Us – This is your chance to be part of a team that’s shaping Canada’s nuclear infrastructure. This pivotal role will spearhead the nuclear division, bringing a wealth…
Added 37 mins ago
Engineering Director, Nuclear
WSP in Canada
Markham, ON
Full-time
Build the Future with Us – This is your chance to be part of a team that’s shaping Canada’s nuclear infrastructure. This pivotal role will spearhead the nuclear division, bringing a wealth…
Added 37 mins ago
Cybersecurity Engineer (System Engineering) - Multiple level
General Dynamics Mission Systems–Canada
Calgary, AB
Full-time
…engineering technology - we’re shaping the future of defence and security. Our teams design and deliver advanced, mission-critical solutions that enhance national security, strengthen…
Added 39 mins ago
Assistant Vice-President (AVP) & Senior Counsel, Litigation
The Canada Life Assurance Company
Winnipeg, MB · London, ON · Toronto, ON
…Employment, as an AVP & Senior Counsel, Litigation, you will be a key leader of the of the Canadian Litigation and Employment team. You will support our Canadian business units by providing…

Brookfield

Senior Analyst – Cyber Threat Intelligence

Toronto, ON, Canada

Pay: Salary Range: C$105K - $115K
Job type: Full-time
Apply by: Oct 21, 2026
Posting language: English
Posted: Sep 21, 2026

Apply About employer

Applications open in a new tab.

Original job description

Location

Brookfield Place - 181 Bay Street

Technology Services

Technology Services (TS) is responsible for delivering all enterprise infrastructure, applications and related end user technology services across all Brookfield business groups.

Brookfield Culture

Brookfield has a unique and dynamic culture. We seek team members who have a long-term focus and whose values align with our Attributes of a Brookfield Leader: Entrepreneurial, Collaborative and Disciplined. Brookfield is committed to the development of our people through challenging work assignments and exposure to diverse businesses.

Job Description

The Senior Security Analyst - Cyber Threat Intelligence is responsible for monitoring, investigating, and assessing emerging cyber threats across the open, deep, and dark web to identify risks that may affect Brookfield, its employees, executives, clients, portfolio companies, technology environment, brand, or critical business operations. This role combines threat intelligence analysis, cybercrime research, dark web monitoring, investigative research, and intelligence reporting to deliver proactive, Brookfield-specific threat visibility. The Senior Analyst works closely with Security Operations, Incident Response, Vulnerability Management, Legal, Privacy, and Fraud teams to translate external threat activity into actionable security and business outcomes.

Key Responsibilities

Monitor cybercriminal ecosystems across the dark web, underground forums, marketplaces, messaging platforms, paste sites, and leak sites for activity targeting Brookfield, its executives, employees, portfolio companies, brands, domains, and technology environment.
Identify and track threat actors, ransomware groups, initial access brokers, malware operators, fraud networks, and criminal collectives relevant to Brookfield's industry, profile, and operations.
Research and investigate stolen credentials, compromised accounts, data leaks, ransomware activity, initial access sales, vulnerability exploitation, malware campaigns, phishing operations, business email compromise, and fraud schemes.
Collect, validate, enrich, and analyze intelligence from OSINT, commercial intelligence sources, internal security data, and specialized cybercrime sources; assess source credibility and distinguish credible threats from speculation and criminal posturing.
Develop and maintain threat actor profiles covering motivations, capabilities, tactics, techniques, and procedures (TTPs), infrastructure, targeting patterns, and historical activity.
Correlate dark web intelligence with internal telemetry, security events, threat intelligence feeds, vulnerability information, and publicly available intelligence.
Map adversary activity to MITRE ATT&CK and other analytical frameworks; identify indicators of compromise (IOCs), adversary infrastructure, domains, IP addresses, cryptocurrency addresses, and other intelligence artifacts.
Produce concise, actionable intelligence reports, threat assessments, executive briefings, and tactical alerts for technical and non-technical audiences.
Support Security Operations and Incident Response teams with external threat context during active investigations, ransomware events, data breaches, fraud cases, and third-party compromises.
Investigate potential exposure of corporate credentials, sensitive data, intellectual property, customer information, and employee information across underground sources.
Validate claims made by threat actors regarding alleged data theft or compromise through appropriate intelligence sources.
Monitor and assess the use of artificial intelligence by threat actors, including AI-enabled phishing, business email compromise, executive impersonation, deepfakes, synthetic identities, disinformation, malware development, and automated reconnaissance.
Investigate suspected synthetic media and AI-generated content using appropriate technical, contextual, and intelligence-validation methods; communicate confidence levels and analytical limitations clearly.
Use approved AI tools to support intelligence collection, translation, analysis, summarization, and reporting while protecting sensitive information and independently validating material conclusions.
Develop and maintain repeatable processes for dark web monitoring, threat actor tracking, intelligence collection, source validation, investigative research, and escalation.
Maintain intelligence records, threat actor dossiers, watchlists, case notes, and documented evidence in accordance with legal, privacy, and operational-security requirements.
Participate in a scheduled information security on-call rotation and provide time-sensitive intelligence support during significant incidents, including ransomware claims, credential exposure, data leaks, executive threats, active exploitation, and third-party compromise.

Key Deliverables

Continuous dark web and underground monitoring, with credible threats identified and escalated within defined timelines.
Current threat actor profiles for groups relevant to Brookfield's industry and risk profile.
Intelligence reports and executive briefings produced on a regular cadence and delivered to security leadership and relevant stakeholders.
Credential exposure and data leak investigations completed, with findings documented and remediation actions tracked.
IOCs and threat intelligence artifacts delivered to Security Operations and Incident Response teams in support of active investigations.
Repeatable intelligence collection and monitoring processes documented and continuously improved.
Threat intelligence integrated with internal telemetry to improve detection and response capabilities.
Material AI-enabled threats assessed and communicated through timely tactical alerts or executive intelligence reporting.
Critical intelligence identified outside regular business hours validated, documented, and escalated within established response targets.

Required Experience

Three to seven years of experience in cyber threat intelligence, cyber investigations, SOC operations, incident response, digital forensics, or security research.
Demonstrated experience researching cybercrime activity and dark web or underground ecosystems.
Experience conducting OSINT and investigative research using multiple sources and analytical techniques.
Strong understanding of threat actor behavior, cybercrime business models, common attack methodologies, and the broader threat landscape.
Experience producing intelligence reports and briefings for technical and executive audiences.
Experience supporting time-sensitive investigations or incidents and working within defined escalation procedures.

Skills & Qualifications

Strong analytical and investigative mindset, with the ability to evaluate source credibility and distinguish fact from speculation.
Ability to translate complex technical findings into concise, actionable intelligence for technical and non-technical stakeholders.
Working knowledge of MITRE ATT&CK, Cyber Kill Chain, Diamond Model, or similar analytical frameworks.
Understanding of IOCs, adversary infrastructure, and intelligence artifact analysis.
Strong written and verbal communication skills, with experience producing structured intelligence products.
Ability to work independently, manage competing priorities, and conduct investigations with appropriate discretion and operational security.
Working knowledge of generative AI technologies, AI-enabled threat activity, synthetic media risks, and responsible use of AI-assisted analytical tools.
Working knowledge of PowerShell and/or Python is an asset.

Preferred Qualifications

Experience tracking ransomware groups, initial access brokers, credential theft operations, data extortion groups, malware-as-a-service, or underground marketplaces.
Experience with cyber threat intelligence platforms, dark web monitoring tools, SIEM technologies, EDR/XDR platforms, and OSINT tooling.
Understanding of cryptocurrency and blockchain activity relevant to cybercrime investigations.
Familiarity with threat intelligence standards and formats such as STIX/TAXII.
Experience conducting investigations involving credential exposure, ransomware, data extortion, fraud, phishing, business email compromise, or third-party compromise.
Familiarity with AI-security risks and recognized guidance such as the NIST AI Risk Management Framework and Generative AI Profile.
Relevant certifications such as CTIA, GCTI, GCFA, GCIH, GCIA, CISSP, or Security+.
Post-secondary education in cybersecurity, computer science, information security, intelligence studies, criminal justice, or a related discipline, or equivalent practical experience.

Additional Requirement

This position participates in a scheduled after-hours on-call rotation and may be required to provide timely support during significant security incidents, critical vulnerabilities, or other urgent security events.

Salary Range: C$105K - $115K

Position Opening Reason:

New Position

Brookfield is committed to maintaining a Positive Work Environment that is safe, respectful; our shared success depends on it. We do not tolerate workplace discrimination, violence or harassment. We are proud to be an Equal Opportunity Employer and make employment decisions based on qualifications, merit, and business needs, without regard to any characteristic protected by applicable law. Applicant information is collected and handled in accordance with our Applicant Privacy Notice. As part of this commitment, we provide barrier-free and accessible employment practices in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and applicable human rights legislation. If you require a Human Rights Code-protected accommodation at any stage of the recruitment process, please let us know when contacted, and we will work with you to meet your needs.

Apply About employer

More about this job

Responsibilities

The Senior Analyst monitors and investigates emerging cyber threats across the open, deep, and dark web to protect Brookfield's assets and operations. They produce actionable intelligence reports and collaborate with security teams to mitigate risks from threat actors, ransomware, and data breaches.

Requirements

Candidates must have three to seven years of experience in cyber threat intelligence, incident response, or security research. A strong understanding of threat actor behavior, analytical frameworks like MITRE ATT&CK, and investigative research techniques is required.

Skills

Cyber Threat Intelligence
Dark Web Monitoring
OSINT
Incident Response
Threat Actor Profiling
MITRE ATT&CK
Vulnerability Management
Data Leak Investigation
Python
PowerShell
Security Operations
Digital Forensics
Risk Assessment
Intelligence Reporting
Generative AI

Visa sponsorship

Not detected in the job text

Keywords

Cyber Threat Intelligence
Dark Web
OSINT
MITRE ATT&CK
Ransomware
Phishing
Business Email Compromise
SIEM
EDR
XDR
Python
PowerShell
STIX/TAXII
Cryptocurrency
Blockchain
NIST AI Risk Management Framework
CTIA
GCTI
GCFA
GCIH
GCIA
CISSP
Security+
Threat Actor
Indicators of Compromise
Digital Forensics
Vulnerability Management
Executive Briefing
Synthetic Media
Operational Security

Report this job