Senior Security Platform Consultant_Remote

Job Title: Senior Security Platform Consultant - Elastic / Splunk
Job ID: 90355
Location: Toronto, Ontario - Remote Canada

Overview:
We are recruiting a Senior Security Platform Consultant for a six-month consulting engagement supporting a large Canadian enterprise. This opportunity is suited to a senior security professional who enjoys working directly with enterprise SIEM platforms, security data and security operations teams rather than operating exclusively in an advisory capacity. The environment is primarily based on Elastic Security, although candidates with significant Splunk experience are encouraged to apply. For the right consultant, Elastic training and certification can be provided.

What you will be doing:
You will join the customer's technical team and contribute to the continued development and operation of its Managed Security Service Provider offering and Security Centre of Excellence. The environment includes a multi-tenant security analytics/SIEM platform. Your work will span platform configuration, security-data onboarding, integrations, detection use cases, troubleshooting and technical support.
Responsibilities will include:

• Configure, support and evolve an enterprise SIEM/security analytics platform

• Onboard security data sources and new environments

• Develop and maintain security use cases, searches and queries

• Create dashboards, detections and alerts

• Support log ingestion, parsing and normalization

• Configure and troubleshoot security integrations

• Investigate complex platform, integration and data issues

• Support platform upgrades and configuration changes

• Work with security, infrastructure and other technical teams

• Act as a senior technical escalation resource when required

• Produce technical documentation and provide knowledge transfer

• Adapt to changing priorities within an active enterprise security environment

What you must have:
You have senior-level experience working with Splunk, Elastic or a comparable enterprise SIEM/security platform, combined with a strong understanding of security operations. We are particularly interested in experience with:

• Elastic Security and/or Splunk

• SIEM engineering and administration

• Security operations and SOC environments

• Log and security-data ingestion

• Data parsing and normalization

• Security platform integrations

• Detection/security use-case development

• Searches and query languages

• Dashboards and alerting

• Enterprise troubleshooting

• Complex production security environments.

Direct Elastic experience is preferred but is not mandatory. A senior Splunk/SIEM specialist who demonstrates the technical depth and ability to transition to Elastic will be considered.

Salary/Rate Range: $110.00 to $120.00/hour (Qualified consultants)

Other Information:

• Contract Term: 6 months

• Start: ASAP

• Location: in Canada only

• Security clearance: Government of Canada Secret Level II --Mandatory security requirement. Applicants must already possess a valid Government of Canada Secret Level II security clearance. This requirement cannot be substituted by eligibility to obtain a clearance.

Thank you for your interest in this opportunity. If you are selected to move forward in the process, we will contact you directly. If you do not hear from us, we encourage you to continue visiting our website for other roles that may be a good fit.


For more information about TEEMA and to consider other career opportunities, please visit our website at www.teemagroup.com