Systems Integrator Senior

MobileComm, Inc; Toronto; On-site; CAD 125,000 - 150,000; Full time

Job summary

An established industry player in the IT and Telecom Networking sector is seeking a skilled professional to support an internal project focused on log ingestion. This role involves developing and coordinating log ingestion packages across multiple platforms, ensuring the proper reception of logs, and maintaining documentation. The ideal candidate will have a strong foundation in security knowledge, particularly with Windows and Linux operating systems, and experience with industry-standard SIEM platforms. Join a dynamic team that values collaboration and innovation, where your contributions will enhance security operations and improve overall service delivery.

Qualifications

• Must have experience in scripting with Python and basic knowledge of Ruby and Powershell.
• Advanced knowledge of SIEM platforms and security log management is required.

Responsibilities

• Develop log ingestion packages for various operating systems and security equipment.
• Coordinate with teams to ensure proper log reception and documentation.

Skills

Python

Ruby

Powershell

Monitoring Solutions

Alerting Solutions

Telemetry Solutions

Windows OS Security

Linux OS Security

SIEM Coordination

Log Delivery

Tools

Prometheus

Grafana

Zabbix

Nagios

ArcSight

Elastic

Splunk

QRadar

OpenShift

AWS

Azure

Google Cloud

Job description

Explore exciting open positions in the IT and Telecom Networking Industry today.

The qualified candidate(s) will support an internal project “SOC Core Log Ingestion” and be responsible for coordinating and facilitating log ingestion deliverables with both the System Administrator and in collaboration with various Bell business units (BU). The log ingestion packages are to be deployed onto servers and security equipment.

Day-to-day responsibilities:

• Participate in developing log ingestion packages for Windows OS, Linux, and other security equipment.
• Validate proper reception of logs coming from servers and security equipment.
• Develop and maintain parsers in SIEM connectors to ensure logs are properly formatted and normalized per data schemas.
• Apply foundational security knowledge to ensure that events with security value reach the SOC, while also protecting the infrastructure from being overloaded.
• Ensure proper documentation for packages developed. Assist with support handoff to deployment support teams.
• Develop service monitoring capabilities in alerting or visualization formats to ensure SOC log services are in high availability.
• Provide support to various customers for log delivery via service desk.
• Participate in various meetings such as daily stand-ups, project reports, and status calls.

Required Skillsets:

• Experience creating and customizing scripts (e.g., Python, Ruby, Powershell); basic Python experience is a must.
• Strong knowledge of monitoring, alerting, and telemetry solutions; Prometheus/AlertManager, Grafana, Zabbix, and Nagios experience are assets.
• Advanced experience in coordinating, developing, and deploying SIEM log packages.
• Knowledge of industry-standard SIEM platforms; 2+ years of hands-on experience, preferably with ArcSight or Elastic. Splunk, QRadar, etc., are acceptable.
• Exposure to DevOps tools and containerized services platforms; OpenShift experience is an asset.
• Experience with log delivery and monitoring in cloud platforms such as AWS, Azure, and Google Cloud is an asset.
• Must have advanced Windows & Linux OS security knowledge; the candidate must know how these operating systems function, as a security integrator, and how to obtain the security logs from Windows & Linux OS distributions.
• Understand and be able to configure log shippers (such as auditbeat, filebeat, winlogbeat); other experience such as Splunk light forwarders is acceptable.