Cybersecurity Engineer responsible for managing and supporting enterprise SIEM platforms such as Microsoft Sentinel, Splunk Enterprise, Cribl Log Stream, and Google SecOps.
- System integration of various data sources for logging of system & application security events to TD enterprise SIEM platforms.
- Administration and maintenance tasks on Enterprise SIEM platforms (System and application upgrades, health checks, dashboard development and reports).
- Work collaboratively with the data onboarding team and key stakeholders to ingest data into the SIEM for security use case development, dashboard and report creation.
- Plan strategic roadmap for analytics technologies in coordination with business aspects of security engineering and Cyber Threat Management teams.
- Contribute to the strategic roadmap for TD enterprise SIEM to meet business needs/requirements.
- University or Post-Graduate Degree in Computer Science/Engineering, Cybersecurity, Information systems/technology or a related discipline
- Nice to have: Microsoft Security Operations Analyst certification
- Nice to have: Splunk admin or architecture certification
- Nice to have: Google Cloud security certification