Senior Cybersecurity Detection Engineer in Toronto

Build stronger enterprise monitoring in Toronto with Microsoft Sentinel and detection engineering expertise. Help improve alert quality across TD's security operations.

As a Senior Information Security Analyst, you will develop, review, tune, and maintain detections across SIEM platforms. You will analyze security events, improve detection coverage, and support investigation outcomes. The work spans Microsoft Sentinel, Defender products, Microsoft Entra ID, Splunk, cloud, identity, endpoint, network, email, and application security.

Key Responsibilities:

• Develop, review, tune, and maintain security detections
• Analyze alerts and telemetry for suspicious activity and gaps
• Improve alert fidelity and reduce unnecessary detection noise
• Document detection logic, data sources, and tuning decisions
• Collaborate with SOC and incident response teams

Requirements:

• Experience in cybersecurity, monitoring, SOC operations, or detection engineering
• Hands-on Microsoft Sentinel experience and Microsoft security familiarity
• Working knowledge of Splunk and SIEM-based investigations
• Understanding of attack techniques, controls, investigations, and risk
• Strong analytical, troubleshooting, communication, and documentation skills

Bring practical detection engineering, SIEM analysis, and broad cybersecurity knowledge to TD's Toronto security operations team.