{"id":3848506,"url":"https://alion.io/job/randstad-canada-it-info-security-analyst-ii","title":"IT - Info Security Analyst II","company":{"id":19351,"name":"Randstad Canada","domain":"randstad.ca","url":"https://alion.io/company/randstad","size_band":null,"is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":40,"max":48,"currency":"CAD","period":"hour","gross":null,"usd_annual":68000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Google SecOps","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-11-05T20:38:13Z","employer_posted_date":null,"last_verified_at":"2026-11-05T20:38:13Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"We are seeking a proactive and skilled IT - Info Security Analyst II for an enterprise-level contract opportunity based in Toronto. In this role, you will take on an important cybersecurity engineering, platform administration, and security analytics capacity, specializing in managing, optimizing, and supporting enterprise Security Information and Event Management (SIEM) platforms.\n\nAs an Info Security Analyst II, you will serve as a key technical contributor supporting log pipelines, security monitoring mandates, and advanced event management. Operating within a hybrid work model in Toronto, you will perform hands-on system administration, handle Level 3 and Level 4 technical support case management, integrate diverse data sources into SIEM platforms, and support platform currency and optimization initiatives. This position demands a cybersecurity specialist with hands-on SIEM experience—such as Splunk Enterprise or Microsoft Sentinel—who can collaborate across internal engineering and threat management teams to enhance detection visibility, build custom dashboards, and maintain platform health aligned with industry leading practices.\n\nLocation: Toronto, ON\n\nAssignment Type: Hybrid (2 days onsite, 3 days work from home)\n\nContract Duration: 10-month contract (with potential for extension and conversion)\n\nAdvantages\nHigh-Visibility Enterprise Scope: Support production-grade SIEM platforms and security log pipelines within a premier financial enterprise environment.\n\nBalanced Hybrid Model: Enjoy work-life flexibility with a structured schedule of 2 days onsite in Toronto and 3 days remote.\n\nModern Security Tooling: Gain hands-on administration and integration experience across Splunk Enterprise, Microsoft Sentinel, and advanced log pipeline platforms.\n\nLong-Term Growth: Secure a 10-month contract with strong potential for extension and conversion based on business needs and performance.\n\nResponsibilities\nPerform system administration, health checks, and routine maintenance tasks across enterprise SIEM platforms, including software updates and application upgrades.\n\nProvide advanced Level 3 and Level 4 technical support case management to resolve complex platform, ingestion, and operational issues.\n\nIntegrate diverse enterprise data sources for reliable logging of system, infrastructure, and application security events into core SIEM platforms.\n\nCollaborate with data onboarding teams, security operations, and internal stakeholders to ingest security logs and support detection use-case development.\n\nDesign, build, and maintain custom operational dashboards, alert views, and analytical reports for security monitoring teams.\n\nResearch emerging logging techniques and ingestion patterns for identifying and monitoring security events generated by new technologies.\n\nContribute to strategic platform roadmaps, capacity planning, and analytics optimization initiatives in alignment with Cyber Threat Management teams.\n\nMaintain comprehensive documentation covering ingestion pipelines, system configurations, operational runbooks, and reporting standards.\n\nParticipate in cross-functional team initiatives to optimize log pipelines and enforce data quality and event-retention standards.\n\nQualifications\nCore Cybersecurity & SIEM Requirements\nCybersecurity Experience: Minimum 2+ years of dedicated professional experience as a Cybersecurity Analyst, Security Operations Analyst, or Cybersecurity Engineer.\n\nSIEM Administration: Minimum 2+ years of hands-on experience administering and supporting enterprise Security Information and Event Management (SIEM) platforms, such as Splunk Enterprise or Microsoft Sentinel.\n\nCertifications: Mandatory foundational certifications in either Splunk or Microsoft Security (e.g., Splunk Core Certified User/Power User or Microsoft Certified: Security Operations Analyst Associate / SC-200 / SC-900).\n\nData Integration & Logging: Practical experience integrating enterprise data sources, configuring log collectors, and validating event ingestion.\n\nEducation: Post-secondary degree or diploma in Cybersecurity, Computer Science, Information Technology, or a related discipline.\n\nPreferred Technical Assets\nAdvanced Pipeline Platforms: Experience or familiarity with log streaming and modern security platforms such as Google SecOps (Chronicle) or Cribl is an asset.\n\nVisualization & Dashboards: Demonstrated hands-on experience building custom dashboards and queries in Microsoft Sentinel (KQL) or Splunk (SPL).\n\nEnterprise Sector: Prior experience operating within a bank, financial institution, or large-scale regulated enterprise environment is an asset.\n\nSoft Skills & Delivery Attributes\nCollaboration & Teamwork: Strong interpersonal and collaboration skills with a proactive team-player approach to partner effectively with internal engineering squads.\n\nDocumentation & Reporting: Strong information-gathering, analytical, and technical documentation skills for authoring standard operating procedures and status reports.\n\nCommunication: Clear written and verbal communication skills to articulate technical security issues and resolution steps across internal teams.\n\nSummary\nIf you're interested in the \"IT - Info Security Analyst II\" role based in Toronto, we encourage you to apply online at www.randstad.ca.\nOnly qualified candidates will be contacted for the next steps. We look forward to hearing from you!\n\nRandstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity-seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non-binary/gender non-conforming; Indigenous or Aboriginal Peoples; persons with disabilities (visible or invisible) and; members of visible minorities, racialized groups and the LGBTQ2+ community.\n\nRandstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to  to ensure their ability to fully participate in the interview process.\n\nThis posting is for existing and upcoming vacancies.","description_format":"text","description_chars":6844,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-11-06T01:44:55Z"}],"visa":[{"country":"CA","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Positions approved through LMIA in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Talent Stream","cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["ESDC: employers issued a positive LMIA"],"filings_for_role_12m":0}],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.888,"p_room":0.9,"age_days":5,"expected_fill_days":14,"reasons":["seen:5","velocity","win:mid","comp:brand"],"computed_at":"2026-11-11T05:49:22Z"},"pay":{"stated_usd_annual":68000,"is_top_pay":false},"html_url":"https://alion.io/job/randstad-canada-it-info-security-analyst-ii","json_url":"https://alion.io/job/randstad-canada-it-info-security-analyst-ii.json","meta":{"generated_at":"2026-11-11T14:53:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27589,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":19351},"rest":"https://alion.io/mcp/rest/get_company?id=19351"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frandstad-canada-it-info-security-analyst-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frandstad-canada-it-info-security-analyst-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frandstad-canada-it-info-security-analyst-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/randstad-canada-it-info-security-analyst-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frandstad-canada-it-info-security-analyst-ii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3848506}},{"tool":"search_jobs","arguments":{"company":"randstad.ca","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3848506},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}