Position: Cyber Security Architect
Location: Toronto, ON (Hybrid)
Job ID#: RQ10506
Duration:12 Months
Role Overview
The Senior Splunk Security Specialist is responsible for the administration, development, and integration support of a Splunk F Information and Event Management (SIEM) platform. This role focuses on designing, implementing, and managing technical security architecture across large, distributed, and crossâplatform environments.
The role supports enterpriseâscale security monitoring initiatives by enabling new integrations, evolving SIEM use cases, and ensuring the platform continues to meet modern security and operational requirements.
Key Responsibilities
- Provide engineering and operational support for the Splunk Cloud SIEM platform across multiple environments and operating systems
- Support implementation, configuration, and ongoing administration of Splunk Cloud
- Design and deliver integrations and enhancements based on evolving business and security requirements
- Contribute to the ongoing development of enterprise security monitoring capabilities and operating models
- Translate business requirements into secure technical solutions and architecture designs
- Develop and maintain dashboards, use cases, and security operational processes
- Support platform evolution through new functionality, integrations, and modernization initiatives
- Ensure deliverables align with defined project timelines and quality standards
General Skills & Competencies
- Leadership experience in developing and implementing technical security architectures
- Extensive experience with at least two cloud service providers (AWS, Azure, GCP)
- Strong background in enterprise security services, identity technologies, databases, and network protocols
- Experience designing secure solutions in large, complex environments
- Working knowledge of ITILâbased processes and the ability to guide others
- Strong analytical, problemâsolving, communication, and decisionâmaking skills
- Proven ability to work collaboratively and meet delivery deadlines
- Awareness of emerging security technologies, trends, and best practices
- Solid understanding of information security principles, policies, and practices
Experience & Skill Set Requirements
Security Information & Event Management (45%)
- Advanced experience with SIEM technologies
- Handsâon expertise with Splunk Cloud (mandatory)
- Experience with Azure Sentinel
Cloud Technologies
- Infrastructure as a Service (IaaS)
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
Agile Project Delivery (15%)
- Experience working in agile delivery environments
- Handsâon experience with:
- Backlogs
- User stories
- Scrum ceremonies
- Sprintâbased delivery
Security Operations (35%)
- SIEM use case development, rationalization, and configuration
- SIEM dashboard creation
- Development and documentation of security operational processes (playbooks/runbooks)
- Practical experience with the MITRE ATT&CK framework
Additional Experience (5%)
- Previous public sector experience is considered an asset
MustâHave Qualifications
- Strong SIEM expertise with Splunk Cloud and/or Azure Sentinel
- Experience building SIEM dashboards and applying the MITRE framework
- Operational security experience, including use case development and configuration
About Symbiotic Digital
Symbiotic Digital provides the IT Experts you need that solve problems and get things done. See what the top 2% in their field can do for you.
(Symbiotic Digital is a division of Symbiotic Group Inc.)
We serve customers in two ways:
- Digital Experts: IT Consulting expertise â Bright Minds That Produce Proven Results
- Recruitment: Find The Right People You Need
Serving IT & Business leaders, Symbiotic Digital provides a business system that enables us to deliver expert technical staff for complex business and IT challenges. Organizations across Canada rely on Symbiotic Digital to staff difficult assignments with proven experts evaluated through our QMS â Quality Management System Staff Development Model.
We are a 100% Indigenousâowned company.