Hybrid Incident Response & SIEM Expert

Insight Global

Toronto

Hybrid

CAD 90,000 - 120,000

Full time

2 days ago
Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Insight Global is seeking an Incident Response Consultant to join a banking client on a 6-month contract, hybrid in downtown Toronto (2 days onsite, core day Wednesday). You will help evaluate cybersecurity tooling, onboarding initiatives, and monitoring/response programs with the GSOC.

The role splits time between reviewing projects for tool integration and hands-on log onboarding to ensure proper telemetry in SIEM/UEBA. Collaboration across multiple teams is essential to success.

Qualifications

  • 5+ years in Incident Response or SOC Level 2.
  • Experience with SIEM for log validation and telemetry validation.
  • Ability to translate security requirements into guidance for teams.

Responsibilities

  • Review security-related projects to assess tool integration into monitoring ecosystem.
  • Assess risks and ensure data from tools routes into centralized platforms.
  • Lead log onboarding and ensure telemetry quality in SIEM/UEBA.
  • Coordinate across technical and business teams on security initiatives.
  • Support GSOC and onboarding initiatives for monitoring and response.

Skills

IR/SOC experience
Security logs understanding
SIEM (Splunk) experience
Log ingestion and normalization
Detection/investigation use cases
Security architecture review
Logging requirements definition
Stakeholder management
Translate security requirements
multitask leadership

Tools

Splunk
Exabeam
ServiceNow
Jira
Sigma
KQL
Logscale

Job description

Insight Global is seeking an Incident Response Consultant to join a banking client on a 6-month contract, hybrid in downtown Toronto (2 days onsite, core day Wednesday). You will help evaluate cybersecurity tooling, onboarding initiatives, and monitoring/response programs with the GSOC.

The role splits time between reviewing projects for tool integration and hands-on log onboarding to ensure proper telemetry in SIEM/UEBA. Collaboration across multiple teams is essential to success.

Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

Cyber Security Analyst
Cyber Security Analyst

Insight Global • Toronto

Hybrid
CAD 69,000 - 87,000
Incident Response Consultant
Incident Response Consultant

Insight Global • Toronto

Hybrid
CAD 90,000 - 120,000
Hybrid Incident Response Specialist | EDR & Forensics
Hybrid Incident Response Specialist | EDR & Forensics

S.I. Systems Ltd. • Toronto

Hybrid
CAD 90,000 - 120,000
Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence
Cyber SOC Analyst – SIEM, Incident Response & Threat Intelligence

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision! • Toronto

Hybrid
CAD 90,000 - 130,000
Incident Response Specialist to investigate and respond to complex Level 2 cybersecurity incidents using EDR and digital forensics- 2428
Incident Response Specialist to investigate and respond to complex Level 2 cybersecurity incidents using EDR and digital forensics- 2428

S I Systems • Toronto

Hybrid
CAD 90,000 - 120,000
Senior Security Incident Response Lead - Hybrid
Senior Security Incident Response Lead - Hybrid

SAP SE • Toronto

Hybrid
CAD 108,000 - 223,000
Cybersecurity Analyst / Incident Response (IR) →
Cybersecurity Analyst / Incident Response (IR) →

Cyberwall Inc • Vaughan

Hybrid
CAD 85,000 - 120,000
Diverse client exposure
Growth opportunities
Collaborative team
Hybrid Cyber Security Lead: Cloud, SIEM & Zero Trust
Hybrid Cyber Security Lead: Cloud, SIEM & Zero Trust

Skillhub Solutions Inc. • Toronto

Hybrid
CAD 110,000 - 117,000
Incident response Specialist
Incident response Specialist

Dexian • Barrie

Hybrid
CAD 80,000 - 110,000
Senior L3 SOC Analyst & Incident Response Lead (Hybrid)
Senior L3 SOC Analyst & Incident Response Lead (Hybrid)

act digital • Montreal

Hybrid
CAD 90,000 - 120,000
Remote working available
Flex Office work environment
Annual training and certification