Senior Detection Engineer: SIEM & Threat Monitoring

TD; Toronto; On-site; CAD 70,000 - 98,000; Full time

Job summary

TD is seeking a Senior Information Security Analyst in Toronto to support enterprise cybersecurity monitoring, detection engineering, and security operations improvements.

The role requires hands-on Splunk and Microsoft Sentinel experience, with familiarity across cloud, identity, endpoint, and network security. You will tune detections, analyze security events, and collaborate with SOC and engineering teams to strengthen monitoring outcomes.

Qualifications

• Hands-on experience with Splunk and Microsoft Sentinel.
• Strong cybersecurity fundamentals and threat detection knowledge.
• Experience reviewing or supporting SIEM-based detections.
• Familiarity with cloud security concepts (identity, logging, monitoring).
• Ability to work with cross-functional teams in a large enterprise.

Responsibilities

• Develop, tune, and maintain detections across SIEM and monitoring.
• Analyze events and telemetry to identify suspicious activity.
• Tune detections to reduce noise and improve usefulness.
• Collaborate with SOC, IR, engineering to improve security outcomes.
• Document detection logic and investigation guidance clearly.

Skills

Cybersecurity fundamentals

Threat detection

Analytical thinking

Communication

Documentation

Cross-functional collaboration

Tools

Splunk

Microsoft Sentinel

Microsoft Defender

Entra ID

KQL/SPL

Job description

TD is seeking a Senior Information Security Analyst in Toronto to support enterprise cybersecurity monitoring, detection engineering, and security operations improvements.

The role requires hands-on Splunk and Microsoft Sentinel experience, with familiarity across cloud, identity, endpoint, and network security. You will tune detections, analyze security events, and collaborate with SOC and engineering teams to strengthen monitoring outcomes.