Engineer II - Enterprise SIEM - Splunk & GCP

TD; Canada; On-site; CAD 91,000 - 137,000; Full time

Job summary

A major financial institution is seeking a Subject Matter Expert (SME) in Security Logging and Monitoring to manage cyber security logging systems. The role involves overseeing SIEM tools like Splunk and Microsoft Sentinel, providing technical guidance, and supporting level 3 and level 4 cases. Candidates should have over 8 years of relevant experience and specialized knowledge in security engineering. This position offers competitive salary and growth opportunities.

Benefits

Health and well-being benefits

Savings and retirement programs

Career development opportunities

Qualifications

• 8+ years of relevant information technology and security engineering experience.
• Expert knowledge of onboarding Google Cloud logs to SIEM.
• Solid understanding of cloud security and risk disciplines.

Responsibilities

• Provide technical management of level 3 and 4 support cases.
• Plan strategic roadmap for analytics technologies.
• Ensure capacity and currency uplifts are executed within timelines.

Skills

Splunk enterprise platform administration

Microsoft Sentinel

Google Cloud Platform logging

IT security knowledge

Communication skills

Technical leadership

Education

University or Post-Graduate Degree

Tools

Google Cloud Platform

Splunk

Job description

Work Location: Toronto, Ontario, Canada

Hours: 37.5

Line of Business: Technology Solutions

Pay Details: $91,200 - $136,800 CAD
The pay details posted reflect a temporary market premium specific to this role that is reassessed annually.
TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD... The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.
As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Job Description

Department Overview

Building a World-Class, Diverse and Inclusive Technology Team at TD

We can't afford to be boring. Neither can you. The scale and scope of what TD does may surprise you. The rapid pace of change makes it a business imperative for us to be smart and open-minded in the way we think about technology. TD's technology and business teams become more intertwined as new opportunities present themselves. This new era in banking does not equal boring. Not at TD, anyway.

TD Enterprise Protect Analytics Engineering Team is responsible for managing the bank's cyber security logging and monitoring systems, providing technical guidance and direction.

Our highly coveted Engineers are interspersed amongst many areas of focus: innovation, design, execution, maintenance, strategy, and system management of our security analytics platforms including but not limited to Cribl Log stream, Splunk Enterprise Security and Microsoft Sentinel. We call all these things incredible learning opportunities, and no two assignments are ever the same.

There's room to grow in all of it.

Role and Responsibilities

About This Role: We are looking for a Subject Matter Expert (SME) in Security Logging and Monitoring, with an engineering mindset and extensive experience working on enterprise Security Information and Event management (SIEM) tools.

This role focuses on providing hands‑on technical management of level 3 and Level 4 support cases, implementation of strategic currency and platform optimization initiatives required to address security logging and monitoring mandates.

You’ll be playing an important role in advancing the overall design, architecture, and technological capabilities of our SIEM platforms in alignment with industry best practices.

Here is some of what you may be asked to perform:

• Provide senior technical guidance and perform implementation, administration, and maintenance tasks on Splunk enterprise Platform, Microsoft Sentinel and Google Cloud Platform logging infrastructure.
• Work with the Senior manager to plan strategic roadmap for analytics technologies in coordination with the business aspects of security engineering and Cyber Threat Management teams.
• Contribute to the strategic roadmap for TD enterprise SIEM to meet business needs/requirements.
• Provide L3 support when needed by the L2 teams.
• Ensure capacity and currency uplifts are planned and executed within desired timelines.
• Promote and drive automation opportunities when and where possible.
• Develop the skills to support Engineering tasks related to the Google Cloud and other Public Cloud initiatives.
• Adhere to internal policies and procedures, technology control standards, and applicable regulatory guidelines.
• Influence behavior to reduce risk and foster a strong technology risk management culture throughout the enterprise.

Job Requirements

What can you bring to the team? Share your credentials, but your relevant experience and knowledge can be just as likely to get our attention. It helps if you have:

• University or Post-Graduate Degree
• 8 years+ relevant information technology and security engineering experience
• Subject matter expert knowledge and experience in administering Splunk enterprise platform, Microsoft sentinel and Google cloud log infrastructure.
• Expert knowledge of onboarding Google cloud logs to SIEM.
• Verifiable operational experience in administrating an enterprise SIEM platform in a large organization.
• Expert knowledge of IT security, risk disciplines and practices, with solid understanding of cloud security.
• Advanced and highly specialized knowledge of business applications, systems, networks, innovation, design activities, best practices, overall business, standards.
• Strong partnership skills to ensure collaboration across a team and other lines of business as part of control execution.
• Excellent written and oral communications skills and ability to articulate and present information to senior executives, peers, all levels of technical staff, and stakeholders.
• Ability to work autonomously as the engineering specialist on high‑profile, complex and/or high‑risk security analytics technology initiatives.
• Technical leadership and consulting prowess when it comes to directing larger teams on new initiatives.

Certifications

• Security certification required (CISSP, CCSP, CompTIA Security+, etc)
• Splunk admin or architecture certification is an advantage.
• Google Cloud security certification is an advantage.
• Azure security Engineer certification is beneficial.

Who We Are

TD is one of the world's leading global financial institutions and is the fifth largest bank in North America by branches/stores... Through regular leadership and development conversations to mentorship and training programs, we're here to support you towards your goals. As an organization, we keep growing - and so will you.

Our Total Rewards Package

Our Total Rewards package reflects the investments we make in our colleagues to help them and their families achieve their financial, physical, and mental well‑being goals. Total Rewards at TD includes a base salary, variable compensation, and several other key plans such as health and well‑being benefits, savings and retirement programs, paid time off, banking benefits and discounts, career development, and reward and recognition programs. Learn more

Additional Information

We're delighted that you're considering building a career with TD. Through regular development conversations, training programs, and a competitive benefits plan, we're committed to providing the support our colleagues need to thrive both at work and at home.
Please be advised that this job opportunity is subject to provincial regulation for employment purposes. It is imperative to acknowledge that each province or territory within the jurisdiction of Canada may have its own set of regulations, requirements.

Colleague Development

If you're interested in a specific career path or are looking to build certain skills, we want to help you succeed... Whether you have a passion for helping customers and want to expand your experience, or you want to coach and inspire your colleagues, there are many different career paths within our organization at TD - and we’re committed to helping you identify opportunities that support your goals.

Training & Onboarding

We will provide training and onboarding sessions to ensure that you’ve got everything you need to succeed in your new role.

Interview Process

We’ll reach out to candidates of interest to schedule an interview. We do our best to communicate outcomes to all applicants by email or phone call.

Accommodation

Your accessibility is important to us. Please let us know if you’d like accommodations (including accessible meeting rooms, captioning for virtual interviews, etc.) to help us remove barriers so that you can participate throughout the interview process.

We look forward to hearing from you!

Language Requirement (Quebec only)

Sans Objet