Senior Security Implementation Specialist
New
C
CalianCybersecurity
This position is fully remote within Canada.Full-TimeSenior
Salary115,000 - 150,000 CAD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- Minimum five years of experience in security engineering, SIEM engineering, or enterprise log management.
- Required Skills
- PythonBashRESTful APIs
Requirements
- Minimum five years of experience in security engineering, SIEM engineering, or enterprise log management.
- Demonstrated expertise with Microsoft Sentinel, including Data Collection Rules, data connectors, Azure Monitor Agent, KQL, and ingestion-time transformations.
- Experience onboarding and managing enterprise-scale log sources and security telemetry.
- Experience with API integrations, authentication technologies, automation, and scripting using PowerShell, Python, Bash, or similar technologies.
- Strong Windows and Linux administration experience, including logging, services, agents, system hardening, and troubleshooting.
- Working knowledge of enterprise networking and firewall technologies, including rules, NAT, segmentation, and syslog/CEF transport.
- Experience creating technical documentation, operational procedures, runbooks, and knowledge-transfer materials.
- Ability to work independently, solve complex technical challenges, and deliver solutions directly to customers.
- Experience with CrowdStrike Falcon Next-Gen SIEM is strongly preferred.
- Experience with operational technology, industrial control systems, or the Claroty platform is an asset.
- Relevant certifications such as Microsoft SC-200, AZ-500, CrowdStrike certifications, Security+, or CISSP are assets.
- Occasional after-hours support may be required in response to customer emergencies.
- Eligibility to obtain a Government of Canada Reliability Status clearance is considered an asset.
Responsibilities
- Plan, design, test, and deploy log-source integrations into Microsoft Sentinel and CrowdStrike Falcon Next-Gen SIEM.
- Design and maintain Microsoft Sentinel data collection capabilities, including connectors, DCRs, KQL transformations, custom tables, Azure Monitor Agent deployment, syslog/CEF forwarding, and custom log ingestion.
- Design and maintain CrowdStrike Falcon Next-Gen SIEM onboarding capabilities, including data connectors, Falcon Log Collector deployments, HEC ingestion, routing pipelines, and custom parsers.
- Build and maintain API-based integrations and automation scripts using REST APIs, PowerShell, Python, and Bash.
- Optimize data ingestion for quality, completeness, normalization, and cost efficiency; validate parsing, field mapping, data health, latency, and coverage.
- Develop operational handover documentation for the SOC, including onboarding checklists, data dictionaries, monitoring guidance, known limitations, and runbooks.
- Maintain log-source inventories, technical documentation, and onboarding backlogs.
- Perform ad hoc firewall changes and recommend network architecture, hardening, segmentation, log transport, and collector placement.
- Contribute to the architecture, design, implementation, and integration of the Claroty OT security platform.
- Partner with project managers, customers, and technical teams to deliver security solutions and improve SIEM engineering practices.
View Full Description & ApplyYou'll be redirected to the employer's site
