IT - Info Security Analyst II

Job Title: Information Security Analyst II
Location: Toronto, Ontario (Hybrid – 2 days onsite and 3 days remote)
Work Location: 320 Front Street West, Toronto, Ontario
Start Date: ASAP
Working Hours: 37.5 hours per week (Monday–Friday, 7.5 hours per day)
 

Job Description

We are looking for a Cybersecurity Engineer with administrative-level knowledge and experience working with enterprise Security Information and Event Management (SIEM) tools.

The ideal candidate will have hands-on experience with SIEM products and log pipelines such as Splunk Enterprise, Microsoft Sentinel, Google SecOps, and Cribl.

This role focuses on providing hands-on system administration and technical support case management at Level 3 and Level 4, along with implementing strategic platform currency and optimization initiatives to address security logging and monitoring mandates.

The successful candidate will play an important role in maintaining and improving the overall design, architecture, and technological capabilities of enterprise SIEM platforms in alignment with industry best practices.

Key Responsibilities

• Perform system integration of various data sources for logging system and application security events into enterprise SIEM platforms.

• Handle administration and maintenance of enterprise SIEM platforms, including system and application upgrades, health checks, dashboard development, and reporting.

• Collaborate with the data onboarding team and key stakeholders to ingest data into SIEM platforms for security use case development, dashboard creation, and reporting.

• Work with the team to plan the strategic roadmap for analytics technologies in coordination with the business aspects of security engineering and Cyber Threat Management teams.

• Contribute to the strategic roadmap for enterprise SIEM platforms to meet business needs and requirements.

• Research logging techniques for identifying, retrieving, and monitoring security events generated by emerging technologies.

Must-Have Qualifications

1. Minimum 2+ years of cybersecurity Analyst or Engineering experience.

2. Minimum 2+ years of experience working with Security Information and Event Management (SIEM) tools.

3. Splunk or Microsoft Security foundational certification.

Technical Skills

• Splunk Enterprise

• Microsoft Sentinel

• Google SecOps

• Cribl

• SIEM Administration

• Security Logging and Monitoring

• Log Pipeline Management

• Data Source Integration

• Dashboard Development

• Security Reporting

• System and Application Upgrades

• Platform Health Checks

• Technical Support – Level 3 and Level 4

Soft Skills

• Strong written and verbal communication skills.

• Strong information-gathering, reporting, and documentation skills.

• Strong collaboration skills and a team-player mindset.

Nice-to-Have Qualifications

• Experience with Google SecOps or Cribl.

• Previous experience working in the banking or financial services industry.

• Experience creating dashboards and reports within Microsoft Sentinel or Splunk.

Work Arrangement

• Hybrid working arrangement: 2 days onsite and 3 days working remotely.

• Work location: 320 Front Street West, Toronto, Ontario.

• Monday to Friday, during core business hours.

• 37.5 hours per week.

• No overtime or travel required.

Additional Information

• Post-secondary education is mandatory.

• The role involves working with internal stakeholders.

• No access to customer data is required.

• Training will include organizational onboarding and knowledge transfer.

• Performance will be measured based on quality of work, meeting delivery timelines, and project participation.

• Contract extension and conversion may be possible depending on business needs and performance.

 

At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws. The pay rate for this position is C$45.00/hr.