Senior Threat Content Specialist, Cyber Intelligence Center - Jobs in Toronto

Job Description

Job Type:Permanent Reference code:118947 Primary Location:Toronto, Ontario, Canada All Available Locations:Toronto, ON; Burlington, ON; Kitchener, ON; Ottawa, ON; Vaughan, ONOur PurposeAt Deloitte, we are driven to inspire and help our people, organization, communities, and country to thrive. Our Purpose is to build a better future by accelerating and expanding access to knowledge. Purpose defines who we are and gives us reason to exist as an organization. By living our Purpose, we will make an impact that matters.

• Have many careers in one Firm.
• Experience a firm where wellness matters.
• Build a network of colleagues for life.

--What will your typical day look like

• Identify issues and gaps on existent content to reduce false positives and non-incidents within the SIEM;
• Provide input, direction and strategic decisions to help drive content improvement decisions within the SIEM;
• Assess the content as a result of changes in the client environment;
• Provide reports on a monthly basis or ad hoc communicating the changes in the content in the SIEM platform;
• Customize security content including filters/rules/report creation and vulnerability mapping;
• Participate on Workshops with clients to discuss improvements over SIEM.

About the teamThis position will focus on supporting and maintaining the new and existing clients in the SOC. Occasional travel to local clients will be required and there are also opportunities for travel nationally and globally if the candidate is interested. This position requires ability to obtain Government of Canadaquot;Secret quot; security clearance.Enough about us, let #39;s talk about youYou are self-motivated, energetic, driven for success and results oriented. Your knowledge of security devices, system administration, security operations processes, incident management, professional services and the firm will help you to support delivery and execution of managed security services offered by Deloitte. You will also be a key player and part of a team providing world-class security operations capabilities for our clients and a capability aligned with our strategic direction and that helps the firm better deliver on new and existing engagements.

• Diploma / Degree in Information Security, or equivalent working experience;
• Minimum of two (4) years of experience working within information security;
• Minimum of one (2) year of SIEM Content Development experience;
• Experience with 2 or more SIEM technologies (e.g. ArcSight, LogRhythm, QRadar, or Splunk);
• Strong working knowledge of Security devices (IDS/IPS, Firewalls, Load Balancers, Routingamp; Switching etc.);
• Knowledge on Risk assessment, security assessment, Continuous monitoring, Kill chain and regulatory (e.g.: PCI, HIPAA, ISO27000 series).

Our promise to our people: Deloitte is where potential comes to life.Be yourself, and more. We are a group of talented people who want to learn, gain experience, and develop skills. Wherever you are in your career, we want you to advance. You shape how we make impact. Diverse perspectives and life experiences make us better. Whoever you are and wherever you #39;re from, we want you to feel like you belong here. We provide flexible working options to support you and how you can contribute. Be the leader you want to be. Be the leader you want to be Some guide teams, some change culture, some build essential expertise. We offer opportunities and experiences that support your continuing growth as a leader. Have as many careers as you want. We are uniquely able to offer you new challenges and roles - and prepare you for them. We bring together people with unique experiences and talents, and we are the place to develop a lasting network of friends, peers, and mentors. Our TVP is about relationships - between leaders and their people, the firm and its people, peers, and within in our communities.The next step is yoursAt Deloitte, we are all about doing business inclusively - that starts with having diverse colleagues of all abilities. Deloitte encourages applications from all qualified candidates who represent the full diversity of communities across Canada. This includes, but is not limited to, people with disabilities, candidates from Indigenous communities, and candidates from the Black community in support of living our values, creating a culture of Diversity Equity and Inclusion and our commitment to our AccessAbility Action Plan , Reconciliation Action Plan and the BlackNorth Initiative . We encourage you to connect with us at accessiblecareers@deloitte.ca if you require an accommodation for the recruitment process (including alternate formats of materials, accessible meeting rooms or other accommodations). We #39;d love to hear from you! By applying to this job you will be assessed against the Deloitte Global Talent Standards. We #39;ve designed these standards to provide our clients with a consistent and exceptional Deloitte experience globally. Deloitte Canada has 30 offices with representation across most of the country. We acknowledge our offices reside on traditional, treaty and unceded territories as part of Turtle Island and is still home to many First Nations, Métis, and Inuit peoples. We are all Treaty people.Job Segment: Information Security, Developer, Equity, Law, Technology, Legal, Finance