{"id":3261400,"url":"https://alion.io/job/calian-group-senior-security-implementation-specialist-remote-ca","title":"Senior Security Implementation Specialist (Remote, CA)","company":{"id":58160,"name":"Calian Group","domain":"calian.com","url":"https://alion.io/company/calian-group","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Solutions","role_family":"Solutions","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["CA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":101000,"max_usd":212000,"period":"year","method":"global_role_seniority_cell","sample_n":1900},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-26T02:57:54Z","employer_posted_date":null,"last_verified_at":"2026-10-26T02:57:54Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Position Overview\nWe are looking for a Senior SIEM Onboarding Engineer to lead the end-to-end onboarding of log sources and security telemetry into Microsoft Sentinel and CrowdStrike Falcon Next-Gen SIEM. This is an engineering-focused role responsible for designing, implementing, validating, and documenting integrations before formally transitioning them to the Security Operations Center (SOC).\n\nWorking within a highly collaborative cybersecurity team, the successful candidate will serve as a technical subject matter expert, drive continuous improvement initiatives, and work directly with customers on complex security projects.\n\nResponsibilities\nPlan, design, test, and deploy log source integrations into Microsoft Sentinel and CrowdStrike Falcon Next-Gen SIEM.\n\nAct as the subject matter expert for Microsoft Sentinel and provide expertise in SIEM engineering and onboarding activities.\n\nDesign and maintain Microsoft Sentinel data collection capabilities, including data connectors, Data Collection Rules (DCRs), KQL transformations, custom tables, Azure Monitor Agent deployment, syslog/CEF forwarding, and custom log ingestion.\n\nDesign and maintain CrowdStrike Falcon Next-Gen SIEM onboarding capabilities, including data connectors, Falcon Log Collector deployments, HEC ingestion, routing pipelines, and custom parsers.\n\nBuild and maintain API-based integrations and automation scripts using technologies such as REST APIs, PowerShell, Python, and Bash.\n\nOptimize data ingestion for quality, completeness, normalization, and cost efficiency.\n\nValidate onboarded data sources, including parsing accuracy, field mapping, data health, latency, and coverage.\n\nDevelop and deliver operational handover documentation for the Security Operations Center, including onboarding checklists, data dictionaries, monitoring guidance, known limitations, and operational runbooks.\n\nMaintain log source inventories, technical documentation, and onboarding backlogs.\n\nPerform ad hoc firewall changes and provide recommendations related to network architecture, hardening, segmentation, log transport, and collector placement.\n\nContribute to the architecture, design, implementation, and integration of the Claroty OT security platform.\n\nPartner with project managers, customers, and technical teams to deliver successful security solutions.\n\nIdentify opportunities for process improvement and contribute thought leadership to the evolution of SIEM engineering practices.\n\nPerform other related duties as required within the scope of the role.\n\nQualifications\nMinimum five years of experience in security engineering, SIEM engineering, or enterprise log management.\n\nDemonstrated subject matter expertise with Microsoft Sentinel, including Data Collection Rules, data connectors, Azure Monitor Agent, KQL, and ingestion-time transformations.\n\nStrong experience onboarding and managing enterprise-scale log sources and security telemetry.\n\nExperience with API integrations, authentication technologies, automation, and scripting using PowerShell, Python, Bash, or similar technologies.\n\nStrong Windows and Linux administration experience, including logging, services, agents, system hardening, and troubleshooting.\n\nWorking knowledge of enterprise networking and firewall technologies, including rules, NAT, segmentation, and syslog/CEF transport.\n\nExperience creating technical documentation, operational procedures, runbooks, and knowledge-transfer materials.\n\nAbility to work independently, solve complex technical challenges, and deliver solutions directly to customers.\n\nStrong communication and customer-facing skills.\n\nExperience in professional services, consulting, or managed service provider environments is considered a strong asset.\n\nAdditional Requirements\nExperience with CrowdStrike Falcon Next-Gen SIEM is strongly preferred.\n\nExperience with operational technology (OT), industrial control systems (ICS), or the Claroty platform is considered an asset.\n\nExperience with observability, log-routing, or data-pipeline technologies is considered an asset.\n\nFamiliarity with standards such as ASIM or Elastic Common Schema is considered an asset.\n\nRelevant certifications such as Microsoft SC-200, AZ-500, CrowdStrike certifications, Security+, or CISSP are considered assets.\n\nThis position is fully remote within Canada.\n\nOccasional after-hours support may be required in response to customer emergencies.\n\nEligibility to obtain a Government of Canada Reliability Status clearance is considered an asset.\n\nCompensation\n$115,000 to $150,000\nPosition Type\nWe have 1 available position(s).\nWhat Happens Next?\nNotify Your Manager: Before applying, or immediately after, you are asked to inform your current manager of your application, in line with our Internal Transfer Guidelines Policy.\n\nHiring Manager Notification: The hiring manager for the new role will be made aware of your application.\n\n1:1 Interview: A Corporate Talent Acquisition Specialist will contact you to schedule a one-on-one interview following your application.\n\nEligibility: Employees are generally expected to have at least 18 months of tenure with Calian, including 12 months in their current position, to be eligible for an internal transfer. For full details, consult the Corporate Talent Acquisition and Hiring Policy or contact your Talent Acquisition team.\n\nJob Title: Senior SIEM Onboarding\nRequisition Number: 2615\nDate: September 23, 2026\nLocation: Ottawa, ON \nRemote: Yes\nBusiness Unit: Essential Industries\nDepartment: Information Systems & Information Technology\n\nJob Type: Full-time\n#SF#\nOriginally posted on Himalayas","description_format":"text","description_chars":5612,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Military Training","Ground Systems","Managed Security","Healthcare Staffing"],"lifecycle":[{"event":"open","at":"2026-10-26T05:28:20Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["seen:1","win:early"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/calian-group-senior-security-implementation-specialist-remote-ca","json_url":"https://alion.io/job/calian-group-senior-security-implementation-specialist-remote-ca.json","meta":{"generated_at":"2026-10-27T22:40:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14423,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58160},"rest":"https://alion.io/mcp/rest/get_company?id=58160"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcalian-group-senior-security-implementation-specialist-remote-ca"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcalian-group-senior-security-implementation-specialist-remote-ca"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcalian-group-senior-security-implementation-specialist-remote-ca"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/calian-group-senior-security-implementation-specialist-remote-ca\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcalian-group-senior-security-implementation-specialist-remote-ca"}]}