It - Info Security Analyst Ii - Toronto

We are seeking a proactive and skilled IT - Info Security Analyst II for an enterprise-level contract opportunity based in Toronto. In this role, you will take on an important cybersecurity engineering, platform administration, and security analytics capacity, specializing in managing, optimizing, and supporting enterprise Security Information and Event Management (SIEM) platforms.
As an Info Security Analyst II, you will serve as a key technical contributor supporting log pipelines, security monitoring mandates, and advanced event management. Operating within a hybrid work model in Toronto, you will perform hands‑on system administration, handle Level 3 and Level 4 technical support case management, integrate diverse data sources into SIEM platforms, and support platform currency and optimization initiatives. This position demands a cybersecurity specialist with hands‑on SIEM experience—such as Splunk Enterprise or Microsoft Sentinel—who can collaborate across internal engineering and threat management teams to enhance detection visibility, build custom dashboards, and maintain platform health aligned with industry leading practices.
Location: Toronto, ON
Assignment Type: Hybrid (2 days onsite, 3 days work from home)
Contract Duration: 10-month contract (with potential for extension and conversion)
Advantages
High-Visibility Enterprise Scope: Support production‑grade SIEM platforms and security log pipelines within a premier financial enterprise environment.
Balanced Hybrid Model: Enjoy work‑life flexibility with a structured schedule of 2 days onsite in Toronto and 3 days remote.
Modern Security Tooling: Gain hands‑on administration and integration experience across Splunk Enterprise, Microsoft Sentinel, and advanced log pipeline platforms.
Long‑Term Growth: Secure a 10‑month contract with strong potential for extension and conversion based on business needs and performance.
Responsibilities
Perform system administration, health checks, and routine maintenance tasks across enterprise SIEM platforms, including software updates and application upgrades.
Provide advanced Level 3 and Level 4 technical support case management to resolve complex platform, ingestion, and operational issues.
Integrate diverse enterprise data sources for reliable logging of system, infrastructure, and application security events into core SIEM platforms.
Collaborate with data onboarding teams, security operations, and internal stakeholders to ingest security logs and support detection use‑case development.
Design, build, and maintain custom operational dashboards, alert views, and analytical reports for security monitoring teams.
Research emerging logging techniques and ingestion patterns for identifying and monitoring security events generated by new technologies.
Contribute to strategic platform roadmaps, capacity planning, and analytics optimization initiatives in alignment with Cyber Threat Management teams.
Maintain comprehensive documentation covering ingestion pipelines, system configurations, operational runbooks, and reporting standards.
Participate in cross‑functional team initiatives to optimize log pipelines and enforce data quality and event‑retention standards.
QualificationsCore Cybersecurity & SIEM Requirements
Cybersecurity Experience: Minimum 2+ years of dedicated professional experience as a Cybersecurity Analyst, Security Operations Analyst, or Cybersecurity Engineer.
SIEM Administration: Minimum 2+ years of hands‑on experience administering and supporting enterprise Security Information and Event Management (SIEM) platforms, such as Splunk Enterprise or Microsoft Sentinel.
Certifications: Mandatory foundational certifications in either Splunk or Microsoft Security (e.G., Splunk Core Certified User/Power User or Microsoft Certified: Security Operations Analyst Associate / SC-200 / SC-900).
Data Integration & Logging: Practical experience integrating enterprise data sources, configuring log collectors, and validating event ingestion.
Education: Post‑secondary degree or diploma in Cybersecurity, Computer Science, Information Technology, or a related discipline.
Preferred Technical Assets
Advanced Pipeline Platforms: Experience or familiarity with log streaming and modern security platforms such as Google SecOps (Chronicle) or Cribl is an asset.
Visualization & Dashboards: Demonstrated hands‑on experience building custom dashboards and queries in Microsoft Sentinel (KQL) or Splunk (SPL).
Enterprise Sector: Prior experience operating within a bank, financial institution, or large‑scale regulated enterprise environment is an asset.
Soft Skills & Delivery Attributes
Collaboration & Teamwork: Strong interpersonal and collaboration skills with a proactive team‑player approach to partner effectively with internal engineering squads.
Documentation & Reporting: Strong information‑gathering, analytical, and technical documentation skills for authoring standard operating procedures and status reports.
Communication: Clear written and verbal communication skills to articulate technical security issues and resolution steps across internal teams.
Randstad Canada is committed to fostering a workforce reflective of all peoples of Canada. As a result, we are committed to developing and implementing strategies to increase the equity, diversity and inclusion within the workplace by examining our internal policies, practices, and systems throughout the entire lifecycle of our workforce, including its recruitment, retention and advancement for all employees. In addition to our deep commitment to respecting human rights, we are dedicated to positive actions to affect change to ensure everyone has full participation in the workforce free from any barriers, systemic or otherwise, especially equity‑seeking groups who are usually underrepresented in Canada's workforce, including those who identify as women or non‑binary/gender non‑conforming;
Indigenous or Aboriginal Peoples;
persons with disabilities (visible or invisible) and;
members of visible minorities, racialized groups and the LGBTQ2+ community.
Randstad Canada is committed to creating and maintaining an inclusive and accessible workplace for all its candidates and employees by supporting their accessibility and accommodation needs throughout the employment lifecycle. We ask that all job applications please identify any accommodation requirements by sending an email to Voir email sur ca.hrm.tc to ensure their ability to fully participate in the interview process.
This posting is for existing and upcoming vacancies.
#J-18808-Ljbffr