Cybersecurity Engineer - SIEM

Cybersecurity Engineer - SIEM

Location

Toronto, ON

Onsite Flexibility

Hybrid — 2 days on-site, 3 days work from home

Contract Details

• Position Type: Contract
• Contract Duration: Through 9/30/2027 (with possibility of extension based on business needs and performance; conversion to permanent also possible based on business needs and performance)
• Pay Rate: C$43.00–C$51.00 / Hour (CAD)
• Shift / Schedule: Monday–Friday, core business hours, 37.5 hours per week, 7.5 hours per day
• Travel Requirements: Not required

Job Summary

We are looking for a Cybersecurity Engineer with admin-level knowledge and experience working on enterprise Security Information and Event Management (SIEM) tools. The ideal candidate would be expected to work on SIEM products and log pipelines such as Splunk Enterprise, Microsoft Sentinel, Google SecOps, and Cribl.

This role focuses on providing hands-on system administration and technical support case management at Level 3 and Level 4, implementation of strategic currency and platform optimization initiatives required to address security logging and monitoring mandates.

You'll be playing an important role in maintaining and improving the overall design, architecture, and technological capabilities of our SIEM platforms in alignment with industry best practices.

Key Responsibilities

• System integration of various data sources for logging of system and application security events to TD enterprise SIEM platforms.
• Administration and maintenance tasks on Enterprise SIEM platforms (system and application upgrades, health checks, dashboard development, and reports).
• Work collaboratively with the data onboarding team and key stakeholders as they ingest data into the SIEM for security use case development, dashboard and report creation.
• Work with the team to plan the strategic roadmap for analytics technologies in coordination with the business aspects of security engineering and Cyber Threat Management teams.
• Contribute to the strategic roadmap for TD enterprise SIEM to meet business needs and requirements.
• Research logging techniques for identifying, retrieving, and monitoring security events generated by emerging technologies.

Must-Have Requirements

• 2 years of cybersecurity Analyst or Engineering experience
• 2 years of experience with Security Information and Event management (SIEM) tools
• Splunk or Microsoft Sentinel foundational certifications

Required Skills

• Strong communication skills (written and verbal)
• Strong information gathering, reporting, and documentation skills
• Strong collaboration skills and team player mindset

Preferred Skills

• Experience with Google SecOps or Cribl
• Banking or financial institution experience
• Experience creating dashboards and reports within Microsoft Sentinel or Splunk

Education Requirements

• Post-secondary education required
• Splunk or Microsoft Security foundational certifications required

About the Client

This client is a leading financial services and banking organization operating across Canada and internationally, employing tens of thousands of professionals across technology, security, risk, and operations functions. The organization is well-regarded for its strong workplace culture, long-term growth opportunities, and collaborative team environment. Professionals in roles here include cybersecurity engineers, information security analysts, IT specialists, and solutions developers working alongside senior colleagues on enterprise-scale security and technology initiatives.

About GTT

GTT is an NMSDC-certified Minority Business Enterprise (MBE) headquartered in Portsmouth, New Hampshire. GTT is a subsidiary of Chenega Corporation, an Alaska-based company and one of the largest Alaska Native-owned corporations. An Inc. 5000 honoree and one of SIA's Best Staffing Firms to Work For, GTT connects professionals with Fortune 500 organizations across IT, engineering, construction, utilities, life sciences, financial services, and healthcare throughout the U.S. and Canada. We're committed to diverse, inclusive workplaces and to placing people in roles where they can do their best work.

Job Number

26-18521 Industry

Information Technology

#LI-Hybrid #gttca