Security Platform Engineer (SIEM)

Sun Life • Waterloo, ON

2d • CA$65,000 - CA$105,000 • Hybrid

About The Position

The Security Platform Engineer (Security Visibility) is responsible for assisting the Sr Platform Engineer in planning, designing, implementing, and monitoring security technologies and projects that support Sun Life’s security policies and procedures. Your primary responsibilities will be supporting in-scope Platform and developing use case scenarios, enhancing the security of Sun Life’s corporate and production systems. You will work closely with Enterprise Infrastructure, IT operations, Enterprise Architecture, and application development teams to identify risks to the business and assist in developing security solutions to protect customer and financial information. The successful candidate must be able to interpret complex information, adapt as needed and have a deep understanding of security risks, data impact and controls to help mitigate the risk and provide countermeasures. The successful candidate is strong in multiple Information Security domains and is expected to lead the efforts to solve complex security problems.

Requirements

• An Information Technology University degree/college diploma in related discipline(s) or equivalent work experience.
• Minimum 2-5 years Information security and engineering experience with enterprise level security technologies in the one or more areas of: Perimeter, Endpoints, Crypto, Cloud, Email Security, Security Visibility, and Automation and Orchestration.
• Proven experience with Infrastructure Visibility related technologies – SIEM (QRadar or Splunk ES), IDS/NDR, or threat simulation tools.
• Broad exposure to multiple security disciplines and in-depth exposure in Incident Response or Detection Engineering.
• Knowledge of a broad range of security controls and risk management frameworks NIST & (ISO) 2700x standards.
• Experience with end-point detection and response, intrusion detection, certificate management, email security and web content filtering technologies.
• Experience planning, researching, and developing security policies, standards, and procedures.
• Experience in deploying enterprise level technology via managed projects using Scrum and Kanban methodologies.
• Knowledge of networking technologies, firewalls, web application firewalls and intrusion detection and prevention systems.
• Knowledge of AWS cloud technologies.
• Knowledge of disaster recovery, technologies, and methods.
• Able to work independently with high degree of ambiguity and deliver expected outcomes, be focused on the end deliverables, and build trust with internal clients and peers.
• Technical Skills – Pursues training and development opportunities; Shares expertise with others; Sound knowledge of security technologies for both Cloud and On Premise.
• Strong leadership and teamwork skills - Motivates others to perform well; effectively influences actions of others; accepts feedback from others.
• Pragmatic understanding of security problems, as a mix of technology and process issues, with the ability to pursue solutions at both layers within the organization.
• Strong oral and written communicator with the ability to communicate security technical issues to peers and management.
• Problem Solving – Identifies and resolves problems in timely manner; Gather and analyzes information skillfully; Develops alternative solutions. Exceptional troubleshooting skills.
• Analytical – Synthesizes complex or diverse information; collects and researches data.
• Critical Thinking – Uses logic and reasoning to identify alternative solutions/approaches to problems.
• Strong practical knowledge of AWS and Microsoft Azure cloud technologies and services.
• Solid understanding of existing and emerging Information Security technologies.
• Self- Starter, strategic thinker in maturing deployed security technologies to ensure full capabilities are explored to meet enterprise security requirements.
• Strong investigative mindset with acute attention to detail, sense of ownership, urgency, and drive.

Responsibilities

• Support and manage the SIEM (Splunk Enterprise Security) within our Security Visibility squad
• Analyze information systems utilizing various cybersecurity techniques and lead security initiatives and enterprise level projects implementing security solutions and performing POC/POV for new technologies.
• Responsible to support and maintain new and existing security technologies that are deployed within Sun Life and owned by Security Visibility.
• Implement risk driven security controls and provide SME (Subject Matter Expertise) during Audit.
• Investigate and respond to security incidents, adhering to defined SLA’s. Participate in teams 24x7 on-call support and be required to join major incident management calls to provide support and consultation.
• Identify risks to the business and recommend strategies to address those risks.
• Manage the capacity and resiliency of security systems protecting Sun Life’s internal and client data.
• Collaborate and build trust with security peers, vendors, and other Sun Life teams to enhance security posture and best practices.
• A change catalyst for Digital transformation, using JIRA, Confluence, estimating stories, setting definition of done, completing and tracking story updates and assignments.
• Smoothly transition and operationalize projects and products. This includes developing roles & responsibilities (RACI), completing product documentation and educating the teams who will be performing BAU (Business as usual) the day-to-day work.
• Document, update and maintain cyber security playbooks, policies and knowledge base articles used to support the established Incident Management and CSIRT processes.
• Continuously improve operational and security platform processes.

Benefits

• Wellness programs that support the three pillars of your health – mental, physical, and financial
• The opportunity to move along a variety of career paths with amazing networking potential.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree