Incident response and SIEM expertise support a hybrid consulting assignment in downtown Toronto, focused on security tooling and monitoring programs.

Insight Global seeks an Incident Response Consultant for a six-month banking client contract with potential extension. Supporting the Global Security Operations Center, you will evaluate cybersecurity projects, review architecture diagrams, assess risks, and guide tooling integration. The position also emphasizes log onboarding, telemetry quality, and detection capabilities.

Key Responsibilities:

- Review AI and cybersecurity tooling changes for monitoring integration
- Assess security architecture diagrams, risks, and data flows
- Validate telemetry routing into centralized monitoring platforms




- Onboard logs and identify SIEM and UEBA telemetry gaps
- Coordinate technical discussions across business and technical teams

Requirements:

- Three to five years in Incident Response or SOC Level 2
- Solid understanding of security logs and response lifecycle
- Hands-on Splunk experience validating logs and telemetry
- Experience with ingestion, parsing, normalization, and data quality
- Ability to define logging requirements and identify gaps

Apply incident response, Splunk, architecture review, and stakeholder management skills to strengthen banking security monitoring in Toronto.

📌 Incident Response Consultant Toronto
🏢 Insight Global
📍 Toronto