Security Platform Developer, Security Automation (Python, Splunk SOAR)

Sun Life; Toronto; On-site; CAD 65,000 - 105,000; Full time

Benefits offered by this job

Hybrid work arrangement

Wellness programs

Career growth opportunities

Job summary

Sun Life in Toronto is seeking a Security Platform Engineer to join our hybrid IT team. You will develop playbooks in Splunk SOAR and automated workflows in Ansible, triaging security incidents and enabling scalable enterprise security.

The role requires 2–3 years of Python and security IT experience, with exposure to cloud and network security. As part of a 24x7 on-call group, you’ll collaborate with stakeholders to refine requirements, document processes, and deploy new security technologies

Qualifications

• 2-3 years of Python development experience.
• An Information Technology university degree/college diploma in related discipline or 5 years IT experience.
• 2-3+ years in security IT industry experience.
• Professional IT security designation (CISM, CISSP, CISA, GIAC, AWS, CompTIA) preferred.

Responsibilities

• Develop playbooks (Python) to triage, alert or automate manual processes in Splunk SOAR.
• Develop automated workflows (YAML) in Ansible Automation Platform to manage accounts and certificates.
• Triage and remediate errors within automation environments.
• Meet with stakeholders to refine requirements for new automation workflows.
• Support and deploy security technologies and enterprise projects; participate in on-call incident management.
• Document and maintain cyber security playbooks, policies and knowledge base articles.

Skills

Python

YAML

SOAR tools

Development

Networking

Windows & Linux

Cloud security

Communication

Education

IT degree/college diploma

Tools

Splunk SOAR

Cortex XSOAR

Ansible

Job description

You are as unique as your background, experience and point of view. Here, you'll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

Location: Hybrid

What will you do?

• In Splunk SOAR, the successful candidate will develop playbooks (Python) to triage, alert or otherwise automate manual processes.
• Within the Ansible Automation Platform, you will develop automated workflows (YAML) to manage accounts, certificates when new systems are built & deployed.
• Triage and remediate errors within the automation environments.
• Meet with stakeholders to help refine the requirements for new automation workflows.
• The successful candidate will work on security initiatives and enterprise level projects performing proof of technology/concept asks, implementing new security controls and capabilities into existing technologies and be responsible to deploy, support and maintain new security technologies and platforms.
• The security platform engineer will be part of a 24x7 on-call support team and be required to join major incident management calls to provide support and consultation for technologies supported by the team.
• Continuously improve upon operational and security platform process activities.
• Smoothly transition and operationalize each project as the implementation phase ends. This includes developing roles & responsibilities (RACI) documents and educating the teams who will be performing BAU (Business as usual) the day-to-day work.
• Document, update and maintain cyber security playbooks, policies and knowledge base articles used to support the established Incident Management and CSIRT processes.

What you need to succeed?

• Python development experience 2-3 years.
• An Information Technology University degree/college diploma in related discipline(s) or equivalent work experience, and/or 5 years experience in Information Technology
• 2-3+ years in security IT industry experience
• Professional designation in IT security (such as CISM, CISSP, CISA, GIAC, AWS or CompTIA) preferred.

Preferred skills

• Experience with SOAR tools (Splunk SOAR, Cortex XSOAR, etc)
• Development experience 2-3 years (Python, YAML, etc)
• Experience with Ansible development.
• Experience planning, researching, and developing security policies, standards, and procedures.
• Knowledge of one or more: end-point detection and response, intrusion detection, crypto technologies, certificate management, email security, web content filtering technologies, cloud security.
• Knowledge of Security Information and Event Management platforms including log types.
• Experience with Windows and Linux based operating systems.
• Experience in deploying enterprise level technology via managed projects.
• Knowledge of networking technologies, firewalls, web application firewalls and intrusion prevention systems.
• Knowledge of cloud technologies.
• Knowledge of disaster recovery, technologies, and methods.
• Strong communicator spoken and written with the ability to communicate technical issues to peers and management.

Reasons why you should join us under the sun

• We are proud to be on the 2026 Best Workplaces in Canada list by Great Place to Work
• Wellness programs that support the three pillars of your health - mental, physical, and financial
• The opportunity to move along a variety of career paths with amazing networking potential.
• As a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office

The Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to [e-mail].

We are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.

We may use artificial intelligence to support candidate sourcing, screening, interview scheduling.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.

Salary Range:

65,000/65 000 - 105,000/105 000

Job Category:

IT - Technology Services

Posting End Date:

26/08/2026