SIEM Engineer - Cyber Security Consultancy

Hamilton Barnes Associates Limited; Toronto; Remote; CAD 125,000 - 150,000; Full time

Job summary

A leading Cyber Security Consultancy is seeking an experienced SIEM Engineer for a long-term contract. This 100% remote position allows you to work with Splunk and Crowdstrike SIEM, ensuring a great work-life balance. Responsibilities include designing and implementing SIEM rules, log parsing, and staying updated with security best practices. Candidates should have over 5 years in SIEM administration and scripting skills.

Qualifications

• 5+ years in Information Security SIEM administration and troubleshooting logging issues.
• 3+ years’ experience in scripting / process automation.
• Experience with Splunk and Crowdstrike SIEM preferred.

Responsibilities

• Design, develop, and implement SIEM rules within the Crowdstrike SIEM platform.
• Log parsing and extraction of relevant security events.
• Fine-tune detection rules to minimize false positives and negatives.
• Stay current with security threats and recommend improvements.

Skills

Information Security SIEM administration

Scripting / process automation

Experience with Splunk

Experience with Crowdstrike SIEM

Connecting Cloud, Firewall and EDR logs to SIEM

Job description

A leading Cyber Security Consultancy is seeking an experienced SIEM Engineer for a long-term contract with a major Manufacturing and Industrial client.

You will get to work with Splunk and Crowdstrike SIEM in this 100% remote role, giving you a work-life balance.

If you are interested in this opportunity, we encourage you to apply today!

Responsibilities :

• Design, develop, and implement security information and event management (SIEM) rules and detections within the Crowdstrike SIEM platform
• Log parsing and extraction of relevant security events
• Fine-tune detection rules to minimize false positives and negatives
• Stay current with emerging threats and security best practices, recommending improvements to the SIEM log configuration.

Skills / Must have :

5+ years in Information Security SIEM administration and troubleshooting logging issues within a SIEM

3+ years’ experience in scripting / process automation

Splunk and Crowdstrike SIEM are preferred

Experience connecting Cloud, Firewall and EDR logs to SIEM

Salary :

Up to $100 per hour

J-18808-Ljbffr