- Salary
- C$45 – C$51/hr
- Location
- Toronto, Ontario
- Workplace
- Hybrid
- Type
- Contract
- Department
- Security
- Experience
- 2+ years
- Closing date
- Today
Description
Job Title: IT - Info Security Analyst II
Location: Toronto, ON (Hybrid)
Estimated Duration: 10 Months
Description:
We are looking for a Cybersecurity engineer with admin level knowledge and experience working on enterprise Security Information and Event management (SIEM) tools. The ideal candidate would be expected to work on SIEM products and log pipelines such as Splunk Enterprise, Microsoft Sentinel, Google SecOps and Cribl.
This role focuses on providing hands-on system administration and technical support case management at level 3 and Level 4, implementation of strategic currency and platform optimization initiatives required to address security logging and monitoring mandates.
You'll be playing an important role in maintaining and improving the overall design, architecture, and technological capabilities of our SIEM platforms in alignment with industry's best practices.
Here is some of what you may be asked to perform:
MUST-HAVE Hard Skills:
SOFT SKILLS:
NICE-TO-HAVE
Location: Toronto, ON (Hybrid)
Estimated Duration: 10 Months
Description:
We are looking for a Cybersecurity engineer with admin level knowledge and experience working on enterprise Security Information and Event management (SIEM) tools. The ideal candidate would be expected to work on SIEM products and log pipelines such as Splunk Enterprise, Microsoft Sentinel, Google SecOps and Cribl.
This role focuses on providing hands-on system administration and technical support case management at level 3 and Level 4, implementation of strategic currency and platform optimization initiatives required to address security logging and monitoring mandates.
You'll be playing an important role in maintaining and improving the overall design, architecture, and technological capabilities of our SIEM platforms in alignment with industry's best practices.
Here is some of what you may be asked to perform:
- System integration of various data sources for logging of system & application security events to client enterprise SIEM platforms.
- Administration and maintenance tasks on Enterprise SIEM platforms (System and application upgrades, health checks, dashboard development and reports)
- Work collaboratively with the data onboarding team and key stake holders, as they ingest data into the SIEM for the security use case development, dashboard and report creation.
- Work with the team to plan strategic roadmap for analytics technologies in coordination with the business aspects of security engineering and Cyber Threat Management teams.
- Contribute to the strategic roadmap for client enterprise SIEM to meet business needs/requirements.
- Research logging techniques for identifying, retrieving and monitoring security events generated by emerging technologies.
MUST-HAVE Hard Skills:
- 2+ years of cybersecurity Analyst or Engineering experience
- 2+ years of experience with Security Information and Event management (SIEM) tools
- Splunk or Microsoft Sentinel foundational certifications
SOFT SKILLS:
- Strong communication skills (written and verbal)
- Strong information gathering, reporting and documentation skills
- Strong collaboration skills, team player mindset
NICE-TO-HAVE
- Google SecOps or Cribl.
- Banking or financial institution experience
- Creating dashboards and reports within Microsoft Sentinel or Splunk
Skills
CybersecuritySIEMSplunk