Security Platform Developer, Security Automation (Python, Splunk SOAR)
Sun Life Financial24 hours ago
Toronto, CanadaMid Level
Responsibilities
- Develop Python playbooks in Splunk SOAR to triage alerts and automate manual processes.
- Develop YAML workflows in the Ansible Automation Platform for account and certificate management.
- Triage and remediate errors in automation environments.
- Gather and refine requirements with stakeholders for new automation workflows.
- Implement security controls and capabilities, and deploy, support, and maintain security technologies and platforms.
- Provide 24x7 on-call support and consultation during major incidents.
- Improve security platform operations and transition completed projects into business-as-usual operations.
- Document and maintain cybersecurity playbooks, policies, and knowledge base articles supporting Incident Management and CSIRT processes.
- Create RACI documentation and educate teams responsible for ongoing operational work.
Requirements
- 2–3 years of Python development experience.
- 2–3 or more years of security IT industry experience.
- Information Technology university degree or related college diploma, or equivalent work experience; the posting also references 5 years of Information Technology experience.
- Experience with SOAR tools such as Splunk SOAR or Cortex XSOAR.
- Experience developing with Python and YAML and with Ansible.
- Experience planning and developing security policies, standards, and procedures.
- Knowledge of endpoint detection and response, intrusion detection, cryptography, certificate management, email security, web content filtering, or cloud security.
- Knowledge of Security Information and Event Management platforms and log types.
- Experience with Windows and Linux operating systems.
- Experience deploying enterprise technology through managed projects.
- Knowledge of networking technologies, firewalls, web application firewalls, intrusion prevention systems, cloud technologies, and disaster recovery.
- Professional IT security designation such as CISM, CISSP, CISA, GIAC, AWS, or CompTIA is preferred.
- Strong written and verbal communication skills, including the ability to explain technical issues to peers and management.
Benefits
- Hybrid work arrangement with flexibility to work from home or the office based on business, client, and individual needs.
- Wellness programs supporting mental, physical, and financial health.
- Career mobility and networking opportunities.
- Participation in discretionary incentive plans may be available to eligible employees.
- The posting closes September 29, 2026.
About Sun Life Financial
Sun Life Financial provides life and health insurance, group benefits, retirement solutions, and asset management services for individuals, employers, and institutional investors. It generates revenue from insurance premiums and investment management fees, including through MFS Investment Management and SLC Management. Founded in 1865 and headquartered in Toronto, Canada, Sun Life operates across North America and Asia, and its shares trade on the TSX and NYSE under the symbol SLF.