Job Type:Permanent Work Model:Hybrid Reference code:129225 Primary Location:Toronto, ON All Available Locations:Toronto, ON; Burlington, ON; Kitchener, ON; Ottawa, ON Our Purpose At Deloitte, our Purpose is to make an impact that matters. We exist to inspire and help our people, organizations, communities, and countries to thrive by building a better future. Our work underpins a prosperous society where people can find meaning and opportunity. It builds consumer and business confidence, empowers organizations to find imaginative ways of deploying capital, enables fair, trusted, and functioning social and economic institutions, and allows our friends, families, and communities to enjoy the quality of life that comes with a sustainable future. And as the largest 100 Canadian:owned and operated professional services firm in our country, we are proud to work alongside our clients to make a positive impact for all Canadians. By living our Purpose, we will make an impact that matters. :Have many careers in one Firm. :Enjoy flexible, proactive, and practical benefits that foster a culture of well:being and connectedness. :Learn from deep subject matter experts through mentoring and on the job coaching :: Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. What will your typical day look like? The Cybersecurity Engineer position supports the SIEM Health Monitoring team which is responsible for monitoring the health and performance of the Splunk platform and data within Splunk. This role is responsible for supporting the Cybersecurity, SIEM and SOC Engineering teams to ensure the efficacy of the Splunk platform by creating content, mitigating monitoring gaps, performing RCA on critical components and creating content. The Role also requires you to work closely with our stakeholders and clients and deliver SIEM Health Monitoring solutions accordingly. :Provide proficient knowledge of recognizing gaps in alerting and maintaining health of the Splunk infrastructure by robust monitoring and collaboration with Splunk Architecture and Data Management teams. :Provide skillful knowledge within a Linux environment, editing and maintaining Splunk configuration files and apps using CI/CD pipelines consisting of Azure DevOps : Github :Collaborate with other Cybersecurity, SIEM and SOC Engineering teams closely to gather requirements, perform troubleshooting, and aid with the creation of Splunk search queries and dashboards as required. :Will be required interact with senior management, as necessary. :Troubleshoot and perform RCA on various data quality alerts and SIEM platform alerts. :Create and drive vendor (Splunk) support cases independently. :Maintain the SIEM Health Monitoring group in ServiceNow or Azure Devops and ensure all tasks and incident SLAs as met as required by our stakeholders. :Create, document and update playbooks, process documents, SOW(s), RCA content periodically. :Actively seek to improve and develop new content to drive process improvement and innovation. :Participate in bi:annual health checks and strategize monitoring maturity road:map :Provide excellent customer service, as we will be required to interact/work with other teams to complete our daily tasks. About the team At Deloitte, we expect results. Incredible-tangible-results. And Deloitte Global professionals play a unique role in delivering those results. We reach across disciplines and borders to serve our global organization. We are the engine of Deloitte. We develop and implement global strategies and provide programs and services that unite our network. In Deloitte Global, everyone has opportunities. We see the importance of your perspective and your ability to create value. We want you to fit in-with an inclu