Cybersecurity Engineer - SIEM

Location: Toronto, ON

Hybrid — 2 days on-site, 3 days work from home

• Position Type: Contract
• Contract Duration: Through 9/30/2027 (with possibility of extension based on business needs and performance)
• Pay Rate: C$43.00–C$51.00 / Hour (CAD)
• Shift / Schedule: Monday–Friday, core business hours, 37.5 hours per week, 7.5 hours per day
• Travel Requirements: Not required

We are looking for a Cybersecurity Engineer with admin-level knowledge and experience working on enterprise Security Information and Event Management (SIEM) tools. The ideal candidate would be expected to work on SIEM products and log pipelines such as Splunk Enterprise, Microsoft Sentinel, Google SecOps, and Cribl.

This role focuses on providing hands-on system administration and technical support case management at Level 3 and Level 4, implementation of strategic currency and platform optimization initiatives required to address security logging and monitoring mandates.

You'll be playing an important role in maintaining and improving the overall design, architecture, and technological capabilities of our SIEM platforms in alignment with industry's best practices.

• System integration of various data sources for logging of system and application security events to TD enterprise SIEM platforms.
• Administration and maintenance tasks on Enterprise SIEM platforms (system and application upgrades, health checks, dashboard development and reports).
• Work collaboratively with the data onboarding team and key stakeholders as they ingest data into the SIEM for the security use case development, dashboard and report creation.
• Work with the team to plan strategic roadmap for analytics technologies in coordination with the business aspects of security engineering and Cyber Threat Management teams.
• Contribute to the strategic roadmap for TD enterprise SIEM to meet business needs/requirements.
• Research logging techniques for identifying, retrieving and monitoring security events generated by emerging technologies.

• 2 years of cybersecurity Analyst or Engineering experience
• 2 years of experience with Security Information and Event management (SIEM) tools
• Splunk or Microsoft Sentinel foundational certifications

• Strong communication skills (written and verbal)
• Strong information gathering, reporting and documentation skills
• Strong collaboration skills, team player mindset

• Experience with Google SecOps or Cribl
• Banking or financial institution experience
• Experience creating dashboards and reports within Microsoft Sentinel or Splunk

• Post-secondary education required
• Splunk or Microsoft Security foundational certifications required

• Interview process: 2 steps — virtual and in-person, 1 hour, panel format

This client is a leading financial services and banking institution operating across North America, with a large and diverse workforce that includes cybersecurity engineers, IT analysts, solutions developers, and technology specialists collaborating across global security and technology teams. The organization places a strong emphasis on work culture, professional development, and long-term growth, and employs tens of thousands of professionals across its operations. Contract roles come with the possibility of conversion to permanent employment based on business needs and performance.

GTT is an NMSDC-certified Minority Business Enterprise (MBE) headquartered in Portsmouth, New Hampshire. GTT is a subsidiary of Chenega Corporation, an Alaska-based company and one of the largest Alaska Native-owned corporations. An Inc. 5000 honoree and one of SIA's Best Staffing Firms to Work For, GTT connects professionals with Fortune 500 organizations across IT, engineering, construction, utilities, life sciences, financial services, and healthcare throughout the U.S. and Canada. We're committed to diverse, inclusive workplaces and to placing people in roles where they can do their best work.

Job Number: 26-18521 Industry: Information Technology

#gttca