Open security roles at TD, and what we know about the team behind them.
banking · 100000 employees · 5 open roles. Updated October 15, 2026.
TD
“TD emphasizes a fundamental commitment to privacy and a safe online environment as core to their business operations.”
TD
“TD emphasizes a fundamental commitment to privacy and a safe online environment as core to their business operations.”
TD
“TD emphasizes a fundamental commitment to privacy and a safe online environment as core to their business operations.”
TD
“TD emphasizes a fundamental commitment to privacy and a safe online environment as core to their business operations.”
TD
“TD emphasizes a fundamental commitment to privacy and a safe online environment as core to their business operations.”
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
How they approach application security
“TD emphasizes a fundamental commitment to privacy and a safe online environment as core to their business operations. They maintain a proactive stance on vulnerability reporting and are particularly interested in findings relating to the OWASP Top 10 for their web applications. The organization states: "Protecting your information and privacy are fundamental to the way we do business" and "We go to great lengths to provide you with a safe and secure online environment." However, specific details on developer enablement versus gatekeeping approaches and internal developer-security interaction models are not publicly documented.”
The team
TD's security organization is led by Steve (Stephen) Sparkes, Senior Vice President & Chief Information Security Officer (appointed April 2025), who manages a team of 1,500 professionals across enterprise security. The organization focuses on Technology Solutions as a key line of business. Active job postings indicate emphasis on Generative AI security, Secrets Management, Threat Modeling, and SIEM/EDR proficiency. Specific AppSec sub-team size is not publicly available, though the larger enterprise security team structure provides the framework for application security initiatives.
What they're working on
TD's security initiatives include vulnerability management processes welcoming reports on publicly accessible systems such as web applications, with authorized research activities. Key recent initiatives focus on AI/Generative AI security strategy and engineering solutions, including advanced offensive security testing across AI/ML systems. Threat modeling exercises are supported as part of secure SDLC practices. No public evidence of a formal Security Champions program or specific CI/CD integration details has been found.