TD Bank
At a Glance
The complete job description, requirements, and application details are available on the original posting.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Section 1 — Philosophy and priorities. Software security is treated as an enterprise program intended to protect the bank and address application control gaps — "Develop and oversee deployment of software security program across TD Bank for in-house developed and commercial off-the-shelf software focusing on standard process and tools" (TD Red Team Operator posting, LinkedIn). The available public material indicates a risk- and control-oriented approach, including assessment of application portfolios, impact analysis, mitigation, and remediation planning — "Conduct comprehensive risk and control design assessments for an application portfolio, articulate and document impact of control gaps to the business and the overall Bank, risk mitigation and remediation plans" (TD Red Team Operator posting, LinkedIn). A developer-first versus hard-gating stance is not publicly available in the reviewed results. Specific stated AppSec pain points are not publicly available. A stated goal is security and privacy by design throughout software delivery — "The CI/CD pipeline automation to deliver security and privacy by design principles and validation throughout the software lifecycle" (TD Securities DevSecOps Engineer posting, LinkedIn/Lensa)”
Security Team
Section 2 — People and structure. Org model: Public postings indicate a global DevSecOps function integrated with software developers, product engineers, cybersecurity engineers, and systems administrators; a fully centralized versus embedded AppSec structure is not publicly available — "As part of a global team..." and "an integrated team member working with software developers, product engineers, cybersecurity engineers and systems administrators" (TD Securities DevSecOps Engineer posting). Reporting line: Not publicly available. The material places software security within broader information security, Cyber Assurance, Security Engineering, and Protect Platform functions, but does not identify a direct CISO or CTO reporting line (TD postings to). Leaders: No verifiable top 1–3 AppSec leaders with public LinkedIn URLs were identified. Team size estimate: Not publicly available. Search query used: "TD Bank application security engineer AppSec LinkedIn"; returned results included individual security and DevSecOps postings but no reliable AppSec headcount range. Active AppSec job postings: No posting could be reliably classified as an active, dedicated AppSec role from the available results. Related DevSecOps and software-security responsibilities appeared in at least 1 posting, but an exact active count cannot be established. Common skill/tool patterns: CI/CD security automation, application-security-control implementation, cloud infrastructure and application defensive configuration, software development, information security, risk and control assessment, agile workflows, and security/privacy by design (TD Securities DevSecOps Engineer posting; TD Red Team Operator posting)
Key Initiatives
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on TD Bank's site