Cybersecurity Engineer - SIEM

Global Technical Talent, Inc.; Toronto; Hybrid; CAD 59,000 - 70,000; Full time

Job summary

Global Technical Talent, an Inc. 5000 Company, is seeking a Cybersecurity Engineer specializing in SIEM for Toronto. The role involves hands-on administration of enterprise SIEM platforms (Splunk Enterprise, Microsoft Sentinel), log pipelines, and dashboard/reporting development.

The candidate will work 3 days remote and 2 days on-site, with focus on system administration, data onboarding collaboration, and roadmap support to meet security logging and monitoring mandates.

Qualifications

• 2 years of cybersecurity Analyst or Engineering experience.
• 2 years of experience with Security Information and Event management (SIEM) tools.
• Splunk or Microsoft Sentinel foundational certifications

Responsibilities

• System integration of various data sources for logging of system and application security events to enterprise SIEM platforms.
• Administration and maintenance tasks on Enterprise SIEM platforms (system and application upgrades, health checks, dashboard development and reports).
• Collaborate with data onboarding team and stakeholders as they ingest data into the SIEM for security use case development, dashboard and report creation.
• Plan strategic roadmap for analytics technologies in coordination with security engineering and Cyber Threat Management teams.
• Contribute to the strategic roadmap for enterprise SIEM to meet business needs/requirements.
• Research logging techniques for identifying, retrieving and monitoring security events.

Skills

SIEM tools

Cybersecurity

Technical communication

Education

Post-secondary education

Splunk/Microsoft Security certifications

Tools

Splunk

Microsoft Sentinel

Job description

Hybrid - 2 days on-site, 3 days work from home

• Position Type: Contract
• Contract Duration: Through 9/30/2027 (with possibility of extension based on business needs and performance)
• Pay Rate: C$43.00-C$51.00 / Hour (CAD)
• Shift / Schedule: Monday-Friday, core business hours, 37.5 hours per week, 7.5 hours per day
• Travel Requirements: Not required

Cybersecurity Engineer - SIEM

Location: Toronto, ON

Onsite Flexibility

Hybrid - 2 days on-site, 3 days work from home

Contract Details

• Position Type: Contract
• Contract Duration: Through 9/30/2027 (with possibility of extension based on business needs and performance)
• Pay Rate: C$43.00-C$51.00 / Hour (CAD)
• Shift / Schedule: Monday-Friday, core business hours, 37.5 hours per week, 7.5 hours per day
• Travel Requirements: Not required

Job Summary

We are looking for a Cybersecurity Engineer with admin-level knowledge and experience working on enterprise Security Information and Event Management (SIEM) tools. The ideal candidate would be expected to work on SIEM products and log pipelines such as Splunk Enterprise, Microsoft Sentinel, Google SecOps, and Cribl.

This role focuses on providing hands-on system administration and technical support case management at Level 3 and Level 4, implementation of strategic currency and platform optimization initiatives required to address security logging and monitoring mandates.

You'll be playing an important role in maintaining and improving the overall design, architecture, and technological capabilities of our SIEM platforms in alignment with industry's best practices.

Key Responsibilities

• System integration of various data sources for logging of system and application security events to TD enterprise SIEM platforms.
• Administration and maintenance tasks on Enterprise SIEM platforms (system and application upgrades, health checks, dashboard development and reports).
• Work collaboratively with the data onboarding team and key stakeholders as they ingest data into the SIEM for the security use case development, dashboard and report creation.
• Work with the team to plan strategic roadmap for analytics technologies in coordination with the business aspects of security engineering and Cyber Threat Management teams.
• Contribute to the strategic roadmap for TD enterprise SIEM to meet business needs/requirements.
• Research logging techniques for identifying, retrieving and monitoring security events generated by emerging technologies.

Must-Have Requirements

• 2 years of cybersecurity Analyst or Engineering experience
• 2 years of experience with Security Information and Event management (SIEM) tools
• Splunk or Microsoft Sentinel foundational certifications

Required Skills

• Strong communication skills (written and verbal)
• Strong information gathering, reporting and documentation skills
• Strong collaboration skills, team player mindset

Preferred Skills

• Experience with Google SecOps or Cribl
• Banking or financial institution experience
• Experience creating dashboards and reports within Microsoft Sentinel or Splunk

Education Requirements

• Post-secondary education required
• Splunk or Microsoft Security foundational certifications required

Important Notes

• Interview process: 2 steps - virtual and in-person, 1 hour, panel format

About the Client

This client is a leading financial services and banking institution operating across North America, with a large and diverse workforce that includes cybersecurity engineers, IT analysts, solutions developers, and technology specialists collaborating across global security and technology teams. The organization places a strong emphasis on work culture, professional development, and long-term growth, and employs tens of thousands of professionals across its operations. Contract roles come with the possibility of conversion to permanent employment based on business needs and performance.

Job Number: 26-18521 Industry: Information Technology

#gttca