Senior Lead Security Engineer
3 days ago
Toronto, ON, Canada
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Full-time
Free with email or Google
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
Free with email or Google
By continuing, you agree to our Terms & Privacy Policy.
Overview
Senior Lead Security Engineer (Splunk & Cloud SIEM) – This role is a high-level engineering position that sits at the intersection of Big Data (Splunk) and Cloud Infrastructure, requiring a candidate who can build the "eyes" of a security operations center. Key Skills Spotlight
Splunk Mastery:
Deep engineering expertise in
Splunk Enterprise , including administration, Search Processing Language (SPL), and Common Information Model ( CIM ) compliance.
Advanced SIEM Architecting:
Proven experience implementing and optimizing
Splunk ITSI ,
UBA ,
CRIBL , and
Microsoft Sentinel
for enterprise-wide visibility.
Cloud Security Ecosystem:
Strong proficiency in
Azure Security
controls and logging, with additional experience across
AWS
and
GCP
environments.
Data Ingestion & Automation:
Ability to build complex ingestion pipelines using
Python , APIs, and databases while automating data onboarding from Windows, Unix, and Network sources.
Strategic Leadership:
Experience developing technology roadmaps, leading technical teams, and aligning security architecture with financial-grade regulatory standards.
Analytical Engineering:
Expertise in building high-fidelity correlation rules, advanced dashboards, and service-level monitoring to detect sophisticated threats.
Senior Lead Security Engineer (Splunk & Cloud SIEM) – This role is a high-level engineering position that sits at the intersection of Big Data (Splunk) and Cloud Infrastructure, requiring a candidate who can build the "eyes" of a security operations center. Key Skills Spotlight
Splunk Mastery:
Deep engineering expertise in
Splunk Enterprise , including administration, Search Processing Language (SPL), and Common Information Model ( CIM ) compliance.
Advanced SIEM Architecting:
Proven experience implementing and optimizing
Splunk ITSI ,
UBA ,
CRIBL , and
Microsoft Sentinel
for enterprise-wide visibility.
Cloud Security Ecosystem:
Strong proficiency in
Azure Security
controls and logging, with additional experience across
AWS
and
GCP
environments.
Data Ingestion & Automation:
Ability to build complex ingestion pipelines using
Python , APIs, and databases while automating data onboarding from Windows, Unix, and Network sources.
Strategic Leadership:
Experience developing technology roadmaps, leading technical teams, and aligning security architecture with financial-grade regulatory standards.
Analytical Engineering:
Expertise in building high-fidelity correlation rules, advanced dashboards, and service-level monitoring to detect sophisticated threats.