Security Platform Engineer, Security Automation (Python, Crowdstrike, SIEM)

Sun Life • Waterloo, ON

11d • Hybrid

About The Position

You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do. Discover how you can make a difference in the lives of individuals, families and communities around the world. Developing automation workflows, the successful candidate will develop playbooks to within Splunk SOAR/Ansible environment to triage, alert or otherwise automate manual processes. The security platform engineer will be responsible for supporting and managing existing security technologies that are currently deployed globally across Sun Life. The successful candidate will work on security initiatives and enterprise level projects performing proof of technology/concept asks, implementing new security controls and capabilities into existing technologies and be responsible to deploy, support and maintain new security technologies and platforms. Meet with stakeholders to help refine the requirements for new automation workflows. The security platform engineer will be part of a 24x7 on-call support team and be required to join major incident management calls to provide support and consultation for technologies supported by the team. Continuously improve upon operational and security platform process activities. Smoothly transition and operationalize each project as the implementation phase ends. This includes developing roles & responsibilities (RACI) documents and educating the teams who will be performing BAU (Business as usual) the day-to-day work. Document, update and maintain cyber security playbooks, policies and knowledge base articles used to support the established Incident Management and CSIRT processes.

Requirements

• An Information Technology University degree/college diploma in related discipline(s) or equivalent work experience, and/or 5 years experience in Information Technology
• 2-3+ years in security IT industry experience
• Knowledge of one or more: end-point detection and response, intrusion detection, crypto technologies, certificate management, email security, web content filtering technologies, cloud security.
• Knowledge of Security Information and Event Management platforms including log types.
• Experience with Windows and Linux based operating systems.
• Experience in deploying enterprise level technology via managed projects.
• Knowledge of networking technologies, firewalls, web application firewalls and intrusion prevention systems.
• Knowledge of cloud technologies.
• Knowledge of disaster recovery, technologies, and methods.
• Strong communicator spoken and written with the ability to communicate technical issues to peers and management.

Nice To Haves

• Professional designation in IT security (such as CISM, CISSP, CISA, GIAC, AWS or CompTIA)
• Experience with SOAR tools (Splunk SOAR, Cortex XSOAR, etc)
• Experience with Ansible development.
• Development experience (Python, YAML, JavaScript, etc)
• Experience planning, researching, and developing security policies, standards, and procedures.

Responsibilities

• Develop automation workflows and playbooks within Splunk SOAR/Ansible environment to triage, alert or otherwise automate manual processes.
• Support and manage existing security technologies currently deployed globally across Sun Life.
• Work on security initiatives and enterprise level projects, performing proof of technology/concept tasks.
• Implement new security controls and capabilities into existing technologies.
• Deploy, support and maintain new security technologies and platforms.
• Meet with stakeholders to help refine the requirements for new automation workflows.
• Be part of a 24x7 on-call support team and join major incident management calls to provide support and consultation for technologies supported by the team.
• Continuously improve upon operational and security platform process activities.
• Smoothly transition and operationalize each project as the implementation phase ends, including developing roles & responsibilities (RACI) documents and educating BAU teams.
• Document, update and maintain cyber security playbooks, policies and knowledge base articles used to support established Incident Management and CSIRT processes.

Benefits

• Recognition as a 2025 Best Workplaces in Ontario by Great Place to Work® Canada.
• Recognition by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work®, for prioritizing employee well-being, fostering a positive work culture, and achieving excellence in mental health.
• Recognition as a company with a 2023 Most Trusted Executive team by Great Place to Work® Canada.
• Wellness programs that support the three pillars of your health – mental, physical, and financial.
• Opportunity to move along a variety of career paths with amazing networking potential.
• Hybrid work model where you and your leader use business and Client needs to choose where you work, at home or in the office.
• Participation in various incentive plans, payment under which is discretionary and subject to individual and company performance.
• Commitment to diversity and inclusion.
• Accommodation for persons with disabilities in the application process or for job postings in an alternative format.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 1-10 employees