SIEM Engineer - Cyber Security Consultancy

Hamilton Barnes Associates Limited; Toronto; Remote; CAD 125,000 - 150,000; Full time

Job summary

A leading Cyber Security Consultancy is seeking an experienced SIEM Engineer for a long-term contract with a major Manufacturing and Industrial client. In this role, you will design, develop, and implement SIEM rules using Splunk and Crowdstrike SIEM. This is a 100% remote position offering an excellent work-life balance. Ideal candidates have over 5 years of experience in SIEM administration and 3 years in scripting/automation.

Qualifications

• 5+ years in Information Security SIEM administration and troubleshooting logging issues.
• 3+ years’ experience in scripting / process automation.
• Experience with Splunk and Crowdstrike SIEM is preferred.

Responsibilities

• Design, develop, and implement SIEM rules within the Crowdstrike platform.
• Log parsing and extraction of relevant security events.
• Fine-tune detection rules to minimize false positives and negatives.
• Stay current with best practices and recommend improvements.

Skills

Information Security SIEM administration

Scripting / process automation

Splunk

Crowdstrike SIEM

Connecting Cloud, Firewall and EDR logs to SIEM

Job description

Overview

A leading Cyber Security Consultancy is seeking an experienced SIEM Engineer for a long-term contract with a major Manufacturing and Industrial client.

You will get to work with Splunk and Crowdstrike SIEM in this 100% remote role, giving you a work-life balance.

If you are interested in this opportunity, we encourage you to apply today!

Responsibilities

• Design, develop, and implement security information and event management (SIEM) rules and detections within the Crowdstrike SIEM platform
• Log parsing and extraction of relevant security events
• Fine-tune detection rules to minimize false positives and negatives
• Stay current with emerging threats and security best practices, recommending improvements to the SIEM log configuration.

Skills / Must have

• 5+ years in Information Security SIEM administration and troubleshooting logging issues within a SIEM
• 3+ years’ experience in scripting / process automation
• Splunk and Crowdstrike SIEM are preferred
• Experience connecting Cloud, Firewall and EDR logs to SIEM

Salary

Up to $100 per hour