About Calian
At Calian, we help organizations overcome obstacles, manage risks, and drive progress. Since 1982, we’ve grown from a small consulting firm into a trusted global company across defence, space, health, nuclear energy, public safety, and government.
We create innovative solutions that tackle complex challenges and help organizations and communities stay resilient, informed, and connected. If you’re driven by purpose and energized by solving real-world challenges, we want you on our team.
Position Overview
We are looking for a Senior SIEM Onboarding Engineer to lead the end-to-end onboarding of log sources and security telemetry into Microsoft Sentinel and CrowdStrike Falcon Next-Gen SIEM. This is an engineering-focused role responsible for designing, implementing, validating, and documenting integrations before formally transitioning them to the Security Operations Center (SOC).
Working within a highly collaborative cybersecurity team, the successful candidate will serve as a technical subject matter expert, drive continuous improvement initiatives, and work directly with customers on complex security projects.
Responsibilities
Plan, design, test, and deploy log source integrations into Microsoft Sentinel and CrowdStrike Falcon Next-Gen SIEM.
Act as the subject matter expert for Microsoft Sentinel and provide expertise in SIEM engineering and onboarding activities.
Design and maintain Microsoft Sentinel data collection capabilities, including data connectors, Data Collection Rules (DCRs), KQL transformations, custom tables, Azure Monitor Agent deployment, syslog/CEF forwarding, and custom log ingestion.
Design and maintain CrowdStrike Falcon Next-Gen SIEM onboarding capabilities, including data connectors, Falcon Log Collector deployments, HEC ingestion, routing pipelines, and custom parsers.
Build and maintain API-based integrations and automation scripts using technologies such as REST APIs, PowerShell, Python, and Bash.
Optimize data ingestion for quality, completeness, normalization, and cost efficiency.
Validate onboarded data sources, including parsing accuracy, field mapping, data health, latency, and coverage.
Develop and deliver operational handover documentation for the Security Operations Center, including onboarding checklists, data dictionaries, monitoring guidance, known limitations, and operational runbooks.
Maintain log source inventories, technical documentation, and onboarding backlogs.
Perform ad hoc firewall changes and provide recommendations related to network architecture, hardening, segmentation, log transport, and collector placement.
Contribute to the architecture, design, implementation, and integration of the Claroty OT security platform.
Partner with project managers, customers, and technical teams to deliver successful security solutions.
Identify opportunities for process improvement and contribute thought leadership to the evolution of SIEM engineering practices.
Perform other related duties as required within the scope of the role.
Qualifications
Minimum five years of experience in security engineering, SIEM engineering, or enterprise log management.
Demonstrated subject matter expertise with Microsoft Sentinel, including Data Collection Rules, data connectors, Azure Monitor Agent, KQL, and ingestion-time transformations.
Strong experience onboarding and managing enterprise-scale log sources and security telemetry.
Experience with API integrations, authentication technologies, automation, and scripting using PowerShell, Python, Bash, or similar technologies.
Strong Windows and Linux administration experience, including logging, services, agents, system hardening, and troubleshooting.
Working knowledge of enterprise networking and firewall technologies, including rules, NAT, segmentation, and syslog/CEF transport.
Experience creating technical documentation, operational procedures, runbooks, and knowledge-transfer materials.
Ability to work independently, solve complex technical challenges, and deliver solutions directly to customers.
Strong communication and customer-facing skills.
Experience in professional services, consulting, or managed service provider environments is considered a strong asset.
Additional Requirements
Experience with CrowdStrike Falcon Next-Gen SIEM is strongly preferred.
Experience with operational technology (OT), industrial control systems (ICS), or the Claroty platform is considered an asset.
Experience with observability, log-routing, or data-pipeline technologies is considered an asset.
Familiarity with standards such as ASIM or Elastic Common Schema is considered an asset.
Relevant certifications such as Microsoft SC-200, AZ-500, CrowdStrike certifications, Security+, or CISSP are considered assets.
This position is fully remote within Canada.
Occasional after-hours support may be required in response to customer emergencies.
Eligibility to obtain a Government of Canada Reliability Status clearance is considered an asset.
Compensation
$115,000 to $150,000
Position Type
We have 1 available position(s).
What Happens Next?
Notify Your Manager: Before applying, or immediately after, you are asked to inform your current manager of your application, in line with our Internal Transfer Guidelines Policy.
Hiring Manager Notification: The hiring manager for the new role will be made aware of your application.
1:1 Interview: A Corporate Talent Acquisition Specialist will contact you to schedule a one-on-one interview following your application.
Eligibility: Employees are generally expected to have at least 18 months of tenure with Calian, including 12 months in their current position, to be eligible for an internal transfer. For full details, consult the Corporate Talent Acquisition and Hiring Policy or contact your Talent Acquisition team.
#LI-XX1# #SF#
At Calian, we do not use Artificial Intelligence (AI) to screen or evaluate candidates. AI tools may support backend administrative tasks, but they do not influence hiring decisions. All evaluations and decisions are made by real people on our recruitment team and hiring managers. All applicants are reviewed and only those chosen for an interview will be contacted by our recruiting team.
How we hire
- Our hiring process is designed to help us get to know you and discover if you are the best fit for our team. It’s also an opportunity for you to gauge if a role at Calian is the right fit for you.
Throughout the process, we’ll share details of the kind of work you’ll be doing, the projects you’ll be working on, the team you’ll be joining, and what it’s like working at Calian. Our biggest tip throughout the process is to just be your authentic self! - Our commitment to diverse, yet highly specialized solutions require many different skills and abilities. We look for the best talent that can contribute to Calian’s success as well as enhance our culture. We encourage you to apply to a role or join our talent community and sign up for job alerts that match your area of expertise and what you are looking for in your next opportunity.
During the recruiting process, you’re encouraged to notify us of any accommodations you may require. We’ll be happy to help.
- We give the same time and consideration to everyone who applies. Here are a few things you can do to ensure your application shines:
- Do your research on Calian, the department, and team you are looking to join
- Add a cover letter that explains why you are a good fit for this position
- Share a portfolio, personal websites, or links to your professional social media
- In your CV, highlight your key achievements – this is your time to brag
- Include dates! Share the timeline of your experience
- Stand out by tailoring your resume to each position you apply to
- Only apply to roles you’re genuinely interested in and that align to your experience
- Be prepared! Do your research on Calian, the department, and team you are looking to join
- View the responsibilities for the role and find examples that demonstrate how you’ve completed these in your previous work experience
- Prepare a list of questions to ask us
- Dress business casual for your interview (virtual and in person)
- We assess your skills and fit, you assess our fit for you
- We keep you updated and share expectations as we make progress in the recruiting cycle
- Feel free to reach out to your Talent Acquisition Specialist at any time during the hiring process