Information Security Analyst II

Our banking client is seeking a Information Security Analyst II (2+ years) to administer and optimize SIEM platforms using Splunk Enterprise and Microsoft Sentinel

Contribute to a high-impact security logging and monitoring initiative focused on platform integration and reporting within a well-known banking environment. The role centers on hands-on SIEM administration, data onboarding, and reporting across Splunk Enterprise, Microsoft Sentinel, Google SecOps, and Cribl. Join a 15-person team with structured onboarding and knowledge transfer, and learn from senior colleagues. Long-term contract through 2027 with potential for extension or conversion, in a hybrid Toronto model.

Contract, Toronto, Hybrid, 2 days on site, 3 days work from home 

320 Front Street West 

11 months

Must Haves

• 2+ years in cybersecurity analysis or engineering
• 2+ years with SIEM platforms, including Splunk Enterprise and Microsoft Sentinel
• Foundational certifications in Splunk or Microsoft Sentinel
• Post-secondary education

Nice to Have

• Google SecOps or Cribl
• Banking or financial institution experience
• Creating dashboards and reports within Microsoft Sentinel or Splunk

Responsibilities

• Provide L3/L4 technical support case management for SIEM platforms
• Integrate data sources to log system and application security events into enterprise SIEM platforms
• Administer and maintain enterprise SIEM platforms, including upgrades, health checks, dashboard development, and reports
• Collaborate with the data onboarding team and stakeholders on data ingestion, security use case development, and dashboard/report creation
• Plan the strategic roadmap for analytics technologies with security engineering and Cyber Threat Management teams
• Contribute to the enterprise SIEM strategic roadmap to meet business requirements
• Research logging techniques to identify, retrieve, and monitor security events from emerging technologies