Cybersecurity Engineer - SIEM

Global Technical Talent, Inc.; Toronto; Ibrido; CAD 59.000 - 70.000; Tempo pieno

Descrizione del lavoro

Global Technical Talent, Inc. is seeking a Cybersecurity Engineer focused on SIEM in Toronto. The role involves administering enterprise SIEM platforms like Splunk and Microsoft Sentinel, building dashboards, and supporting security logging initiatives.

You will work in a hybrid model with 2 days on-site and 3 days remote, contributing to roadmap development and security event monitoring across the organization.

Competenze

• 2 years of cybersecurity Analyst or Engineering experience.
• 2 years of experience with Security Information and Event management (SIEM) tools.
• Splunk or Microsoft Sentinel foundational certifications.
• Post-secondary education required and foundational certifications expected.

Mansioni

• System integration of data sources for logging to enterprise SIEM platforms.
• Administration and maintenance tasks on Enterprise SIEM platforms, upgrades and health checks.
• Collaborate with onboarding team to ingest data for security use cases, dashboards and reports.
• Plan strategic analytics roadmap in coordination with security teams.
• Contribute to TD enterprise SIEM strategic roadmap to meet business needs.
• Research logging techniques for identifying, retrieving and monitoring security events.

Conoscenze

Strong communication

Documentation skills

Team collaboration

Formazione

Post-secondary education

Splunk or Microsoft Security foundational certifications

Strumenti

Splunk

Microsoft Sentinel

Cribl

Descrizione del lavoro

Cybersecurity Engineer - SIEM

Location: Toronto, ON

Onsite Flexibility

Hybrid — 2 days on-site, 3 days work from home

Contract Details

• Position Type: Contract
• Contract Duration: Through 9/30/2027 (with possibility of extension based on business needs and performance)
• Pay Rate: C$43.00–C$51.00 / Hour (CAD)
• Shift / Schedule: Monday–Friday, core business hours, 37.5 hours per week, 7.5 hours per day
• Travel Requirements: Not required

Job Summary

We are looking for a Cybersecurity Engineer with admin-level knowledge and experience working on enterprise Security Information and Event Management (SIEM) tools. The ideal candidate would be expected to work on SIEM products and log pipelines such as Splunk Enterprise, Microsoft Sentinel, Google SecOps, and Cribl.

This role focuses on providing hands‑on system administration and technical support case management at Level 3 and Level 4, implementation of strategic currency and platform optimization initiatives required to address security logging and monitoring mandates.

You’ll be playing an important role in maintaining and improving the overall design, architecture, and technological capabilities of our SIEM platforms in alignment with industry's best practices.

Key Responsibilities

• System integration of various data sources for logging of system and application security events to TD enterprise SIEM platforms.
• Administration and maintenance tasks on Enterprise SIEM platforms (system and application upgrades, health checks, dashboard development and reports).
• Work collaboratively with the data onboarding team and key stakeholders as they ingest data into the SIEM for the security use case development, dashboard and report creation.
• Work with the team to plan strategic roadmap for analytics technologies in coordination with the business aspects of security engineering and Cyber Threat Management teams.
• Contribute to the strategic roadmap for TD enterprise SIEM to meet business needs/requirements.
• Research logging techniques for identifying, retrieving and monitoring security events generated by emerging technologies.

Must-Have Requirements

• 2 years of cybersecurity Analyst or Engineering experience
• 2 years of experience with Security Information and Event management (SIEM) tools
• Splunk or Microsoft Sentinel foundational certifications

Required Skills

• Strong communication skills (written and verbal)
• Strong information gathering, reporting and documentation skills
• Strong collaboration skills, team player mindset

Preferred Skills

• Experience with Google SecOps or Cribl
• Banking or financial institution experience
• Experience creating dashboards and reports within Microsoft Sentinel or Splunk

Education Requirements

• Post‑secondary education required
• Splunk or Microsoft Security foundational certifications required

Important Notes

• Interview process: 2 steps — virtual and in‑person, 1 hour, panel format

About the Client

This client is a leading financial services and banking institution operating across North America, with a large and diverse workforce that includes cybersecurity engineers, IT analysts, solutions developers, and technology specialists collaborating across global security and technology teams. The organization places a strong emphasis on work culture, professional development, and long‑term growth, and employs tens of thousands of professionals across its operations. Contract roles come with the possibility of conversion to permanent employment based on business needs and performance.

About GTT

GTT is an NMSDC-certified Minority Business Enterprise (MBE) headquartered in Portsmouth, New Hampshire. GTT is a subsidiary of Chenega Corporation, an Alaska‑based company and one of the largest Alaska Native‑owned corporations. An Inc. 5000 honoree and one of SIA's Best Staffing Firms to Work For, GTT connects professionals with Fortune 500 organizations across IT, engineering, construction, utilities, life sciences, financial services, and healthcare throughout the U.S. and Canada. We're committed to diverse, inclusive workplaces and to placing people in roles where they can do their best work.

Job Number: 26-18521 Industry: Information Technology

#LI-Hybrid #gttca #LI-GTT