Senior Lead Security Engineer (Splunk & Cloud SIEM)
A
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
📍 toronto, on, Canada
Job Description
OverviewSenior Lead Security Engineer (Splunk & Cloud SIEM) – This role is a high-level engineering position that sits at the intersection of Big Data (Splunk) and Cloud Infrastructure, requiring a candidate who can build the eyes of a security operations center.
Key Skills SpotlightSplunk Mastery:Deep engineering expertise inSplunk Enterprise , including administration, Search Processing Language (SPL), and Common Information Model ( CIM ) compliance.Advanced SIEM Architecting:Proven experience implementing and optimizingSplunk ITSI ,UBA ,CRIBL , andMicrosoft Sentinelfor enterprise-wide visibility.Cloud Security Ecosystem:Strong proficiency inAzure Securitycontrols and logging, with additional experience acrossAWSandGCPenvironments.Data Ingestion & Automation:Ability to build complex ingestion pipelines usingPython , APIs, and databases while automating data onboarding from Windows, Unix, and Network sources.Strategic Leadership:Experience developing technology roadmaps, leading te...
Key Skills SpotlightSplunk Mastery:Deep engineering expertise inSplunk Enterprise , including administration, Search Processing Language (SPL), and Common Information Model ( CIM ) compliance.Advanced SIEM Architecting:Proven experience implementing and optimizingSplunk ITSI ,UBA ,CRIBL , andMicrosoft Sentinelfor enterprise-wide visibility.Cloud Security Ecosystem:Strong proficiency inAzure Securitycontrols and logging, with additional experience acrossAWSandGCPenvironments.Data Ingestion & Automation:Ability to build complex ingestion pipelines usingPython , APIs, and databases while automating data onboarding from Windows, Unix, and Network sources.Strategic Leadership:Experience developing technology roadmaps, leading te...