Clearance required: Eligible for Secret - Client completes their own clearance verifications (eligible: minimum 10+ years residing in Canada)
Hybrid/Remote - 2 days per week on client site but will accept remote for strong candidate
No relocation and No travel expenses
Additional Qualifications to consider:
• Demonstrated experience using Linux, Windows and Syslog
• Demonstrated experience parsing data files for Splunk.
• English essential, French will be considered an asset.
• Experience with Cyber Security projects that involved Solution Integration with multiple vendor technologies.
• Knowledge of service and project delivery methodologies
Experience with agile and traditional system.
Statement of Work:
The Resource will be working with the Cyber Monitoring and Response (M&R) team to support the Client’s Splunk deployment, the implementation of API configurations to support integrations/data integration requests, define and write security/risk-based use cases, and support assessing various Splunk capabilities.
The Resource will be responsible for the following activities and deliverables:
• Work with the Cyber M&R SIEM team, the Splunk solutions integrator and other stakeholders to support the development and implementation of changes to the Splunk environment and use cases.
• Perform tasks supporting Splunk operations and maintenance.
• Contribute to the evaluation of Splunk integration capabilities with other tools such as other SIEM/SOAR solutions and data and analytical environment and platforms.
• Gather requirements, define data security and risk-based use cases and processes.
• Document all work created.
• Troubleshoot any issues with Splunk integrations.
• Participate in current/future state solutions design and development phase to implement data analytical use cases, including Machine Learning (ML) models.
• Identify opportunities for improving usage of Splunk Enterprise Security and integration with other tools, provide best practices, and recommend options and solutions.
• Prepare detailed specifications documents if needed.
• Participate in the process for prioritizing client requests.
• Develop and deliver communications to clients and stakeholders.
• Accredited Splunk Enterprise/Enterprise Security Certification
• A minimum of five (5) years of demonstrated experience with Splunk Enterprise Security
• Demonstrated recent experience setting up Splunk with an organization of similar size to the Bank.
• Demonstrated experience in developing and implementing advanced data analytical use cases including machine learning models.
• University Degree or College Diploma in Computer Science, Information Technology or a related field
#LI-SH1
Together, as owners, let’s turn meaningful insights into action.
Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…
You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.
Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.
You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.
At CGI, we recognize the richness that diversity brings. We strive to create a work culture where all belong and collaborate with clients in building more inclusive communities. As an equal-opportunity employer, we want to empower all our members to succeed and grow. If you require an accommodation at any point during the recruitment process, please let us know. We will be happy to assist.
Come join our team—one of the largest IT and business consulting services firms in the world.