Engineer I

Posted 12 hours ago

Apply Now

Resume Score

Check how well your resume matches this job before you apply.

Sign in to check score

About the role

  • Cybersecurity Engineer administering TD’s enterprise SIEM and security monitoring platforms. Supporting Sentinel, Splunk, Google SecOps, and Cribl across a major Canadian bank.

Responsibilities

  • Manage the bank's cybersecurity logging and monitoring systems
  • Provide technical guidance and direction for security analytics platforms
  • Perform system integration of data sources for logging system and application security events
  • Administer and maintain enterprise SIEM platforms, including upgrades, health checks, dashboards, and reports
  • Collaborate with data onboarding teams and stakeholders on SIEM data ingestion, security use cases, dashboards, and reports
  • Plan and contribute to strategic roadmaps for analytics technologies and enterprise SIEM
  • Research logging techniques for emerging technologies
  • Provide Level 3 and Level 4 support to Level 2 teams and business users
  • Plan and execute capacity and currency uplifts
  • Promote and drive automation opportunities
  • Support security logging and monitoring for TD assets in public cloud
  • Develop skills for security engineering tasks related to security logging and AI security initiatives
  • Follow internal policies, technology control standards, and regulatory guidelines
  • Influence behavior to reduce risk and strengthen technology risk management culture

Requirements

  • University or Post-Graduate Degree in Computer Science/Engineering, Cybersecurity, Information systems/technology or a related discipline
  • 5 years+ relevant information technology and security engineering experience
  • Good knowledge and administrative experience working with Security Information and Event Management (SIEM) tools including Microsoft Sentinel
  • Very good knowledge of onboarding logs to SIEM
  • Operational experience in administrating an enterprise SIEM platform
  • Good knowledge of IT security, risk disciplines and practices, with adequate understanding of cloud security
  • Specialized knowledge of business applications, systems, networks, innovation, design activities, best practices, overall business standards
  • Strong partnership skills to ensure collaboration across a team and other lines of business as part of control execution
  • Excellent written and oral communications skills and ability to articulate and present information to peers, all levels of technical staff, and stakeholders
  • Ability to work collaboratively and autonomously as needed on complex security analytics technology initiatives
  • Strong interest to learn new technologies within the Security Logging and monitoring ecosystem
  • Certification in at least one SIEM technology is required (Microsoft Sentinel and/or Splunk preferred)
  • Security certification is required (CISSP, CCSP, CompTIA Security+, etc.)
  • Microsoft Security Operations Analyst certification is an advantage
  • Splunk admin or architecture certification is beneficial
  • Google Cloud security certification is beneficial

Benefits

  • Health and well-being benefits
  • Savings and retirement programs
  • Paid time off
  • Banking benefits and discounts
  • Career development
  • Reward and recognition programs
  • Regular career, development, and performance conversations with manager
  • Online learning platform
  • Mentoring programs
  • Training and onboarding sessions
  • Accommodation support during the interview process

Job title

Job type

Full Time

Experience level

Mid levelSenior

Salary

CA$81,600 - CA$115,200 per year

Degree requirement

Bachelor's Degree

Tech skills

CloudCyber SecuritySplunk

Location requirements

OnsiteTorontoCanada

Report this job

Found something wrong with the page? Please let us know by submitting a report below.