Senior Lead Security Engineer (Splunk & Cloud SIEM)

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Toronto; On-site; CAD 120,000 - 150,000; Full time

Job summary

A leading technology firm in Toronto is seeking a Senior Lead Security Engineer to enhance its security operations center using Splunk and Cloud technologies. Candidates should possess deep expertise in Splunk and advanced SIEM architecting with proven experience in cloud security environments like Azure, AWS, and GCP. The role requires strategic leadership capabilities and proficiency in Python for data automation. This position offers a chance to influence significant security architecture for financial-grade standards.

Responsibilities

• Build the 'eyes' of a security operations center for visibility.
• Implement and optimize Splunk ITSI, UBA, and CRIBL.
• Develop technology roadmaps and lead technical teams.

Skills

Splunk Mastery

Advanced SIEM Architecting

Cloud Security Ecosystem

Data Ingestion & Automation

Strategic Leadership

Analytical Engineering

Tools

Splunk Enterprise

Azure Security

AWS

GCP

Python

Job description

Overview

Senior Lead Security Engineer (Splunk & Cloud SIEM) – This role is a high-level engineering position that sits at the intersection of Big Data (Splunk) and Cloud Infrastructure, requiring a candidate who can build the "eyes" of a security operations center.

Key Skills Spotlight

• Splunk Mastery: Deep engineering expertise in Splunk Enterprise, including administration, Search Processing Language (SPL), and Common Information Model (CIM) compliance.

• Advanced SIEM Architecting: Proven experience implementing and optimizing Splunk ITSI, UBA, CRIBL, and Microsoft Sentinel for enterprise-wide visibility.

• Cloud Security Ecosystem: Strong proficiency in Azure Security controls and logging, with additional experience across AWS and GCP environments.

• Data Ingestion & Automation: Ability to build complex ingestion pipelines using Python, APIs, and databases while automating data onboarding from Windows, Unix, and Network sources.

• Strategic Leadership: Experience developing technology roadmaps, leading technical teams, and aligning security architecture with financial-grade regulatory standards.

• Analytical Engineering: Expertise in building high-fidelity correlation rules, advanced dashboards, and service-level monitoring to detect sophisticated threats.