Back to results

IT - Info Security Analyst II

  • Toronto, ON, Canada

Hybrid

$45 CAD / hour

Apply on spectraforce.com About employer

Applications open in a new tab.

Job details

Pay
$45 CAD / hour
Workplace
Hybrid
Working hours
37.5 hours per week
Posting language
English
Posted

Original job description

Job Title: Information Security Analyst II
Location: Toronto, Ontario (Hybrid – 2 days onsite and 3 days remote)
Work Location: 320 Front Street West, Toronto, Ontario
Start Date: ASAP
Working Hours: 37.5 hours per week (Monday–Friday, 7.5 hours per day).
 

Job Description

We are looking for a Cybersecurity Engineer with administrative-level knowledge and experience working with enterprise Security Information and Event Management (SIEM) tools.

The ideal candidate will have hands-on experience with SIEM products and log pipelines such as Splunk Enterprise, Microsoft Sentinel, Google SecOps, and Cribl.

This role focuses on providing hands-on system administration and technical support case management at Level 3 and Level 4, along with implementing strategic platform currency and optimization initiatives to address security logging and monitoring mandates.

The successful candidate will play an important role in maintaining and improving the overall design, architecture, and technological capabilities of enterprise SIEM platforms in alignment with industry best practices.

Key Responsibilities

  • Perform system integration of various data sources for logging system and application security events into enterprise SIEM platforms.

  • Handle administration and maintenance of enterprise SIEM platforms, including system and application upgrades, health checks, dashboard development, and reporting.

  • Collaborate with the data onboarding team and key stakeholders to ingest data into SIEM platforms for security use case development, dashboard creation, and reporting.

  • Work with the team to plan the strategic roadmap for analytics technologies in coordination with the business aspects of security engineering and Cyber Threat Management teams.

  • Contribute to the strategic roadmap for enterprise SIEM platforms to meet business needs and requirements.

  • Research logging techniques for identifying, retrieving, and monitoring security events generated by emerging technologies.

Must-Have Qualifications

  1. Minimum 2+ years of cybersecurity Analyst or Engineering experience.

  2. Minimum 2+ years of experience working with Security Information and Event Management (SIEM) tools.

  3. Splunk or Microsoft Security foundational certification.

Technical Skills

  • Splunk Enterprise

  • Microsoft Sentinel

  • Google SecOps

  • Cribl

  • SIEM Administration

  • Security Logging and Monitoring

  • Log Pipeline Management

  • Data Source Integration

  • Dashboard Development

  • Security Reporting

  • System and Application Upgrades

  • Platform Health Checks

  • Technical Support – Level 3 and Level 4

Soft Skills

  • Strong written and verbal communication skills.

  • Strong information-gathering, reporting, and documentation skills.

  • Strong collaboration skills and a team-player mindset.

Nice-to-Have Qualifications

  • Experience with Google SecOps or Cribl.

  • Previous experience working in the banking or financial services industry.

  • Experience creating dashboards and reports within Microsoft Sentinel or Splunk.

Work Arrangement

  • Hybrid working arrangement: 2 days onsite and 3 days working remotely.

  • Work location: 320 Front Street West, Toronto, Ontario.

  • Monday to Friday, during core business hours.

  • 37.5 hours per week.

  • No overtime or travel required.

Additional Information

  • Post-secondary education is mandatory.

  • The role involves working with internal stakeholders.

  • No access to customer data is required.

  • Training will include organizational onboarding and knowledge transfer.

  • Performance will be measured based on quality of work, meeting delivery timelines, and project participation.

  • Contract extension and conversion may be possible depending on business needs and performance.

 

Applicant Notices & Disclaimers

  • For information on benefits, equal opportunity employment, and location-specific applicant notices, click here



At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws. The pay rate for this position is C$45.00/hr.

More about this job

Responsibilities

The Information Security Analyst II at SPECTRAFORCE will connect security logs from many systems into SIEM platforms and keep those platforms healthy and up to date. They will also build dashboards and reports, support colleagues at the highest support levels, and help plan the future of the security monitoring tools.

Requirements

Candidates need at least 2 years of cybersecurity analyst or engineering work and 2 years with SIEM tools, plus a Splunk or Microsoft Security foundational certification. Strong written and verbal communication, documentation skills and a team mindset are needed, and post-secondary education is mandatory.

Skills

  • Splunk Enterprise
  • Microsoft Sentinel
  • Google SecOps
  • Cribl
  • SIEM administration
  • Security logging and monitoring
  • Log pipeline management
  • Data source integration
  • Dashboard development
  • Security reporting
  • System and application upgrades
  • Platform health checks
  • Level 3 and Level 4 technical support
  • Splunk certification
  • Microsoft Security certification
  • Analytics roadmap planning
  • Documentation
  • Stakeholder collaboration
  • Communication

Categories

  • Technology
  • Security & Safety
  • Software
  • Data & Analytics
  • Customer Service & Support

Keywords

  • Splunk Enterprise
  • Microsoft Sentinel
  • Google SecOps
  • Cribl
  • SIEM
  • security information and event management
  • security logging
  • security monitoring
  • log pipeline
  • SIEM administration
  • dashboards
  • security reporting
  • cybersecurity analyst
  • information security
  • threat management
  • Level 3 support
  • Level 4 support
  • data onboarding
  • Toronto
  • hybrid

Seniority

Mid level

Licences and certifications

  • Splunk certification
  • Microsoft Security foundational certification

Tools

  • Splunk Enterprise
  • Microsoft Sentinel
  • Google SecOps
  • Cribl

Languages

  • English

Report this job

Get in touch
MovoJobs

How can we help?