Senior Security Platform Developer, Security Automation (Python, Splunk SOAR)

sunlife; Toronto; Presencial; CAD 110 000 - 160 000; Tempo integral

Resumo da oferta

Sun Life's Security Automation & Orchestration team builds automation that connects and enhances security capabilities across Security Operations. Working across SIEM, endpoint, cloud, and other platforms, the team develops solutions using Splunk SOAR, Python, APIs, and related technologies.

Our automation helps monitor health, generate alerts, and reduce manual work. The role designs, develops and maintains automation, leads technical escalation, mentors engineers, and translates security

Qualificações

• Experience designing and implementing security automation solutions.
• Proficiency with Splunk SOAR, Python and REST APIs.
• Experience with Ansible and YAML for automation workflows.

Responsabilidades

• Design, develop, test and maintain complex automation solutions and playbooks.
• Lead automation workflows using YAML in Ansible Automation Platform.
• Serve as senior escalation point for automation platforms and guide incident resolution.
• Provide technical leadership and mentor junior engineers.
• Translate business and security requirements into technical designs and automation.

Conhecimentos

Splunk SOAR

Python

APIs

Automation

Security operations

Ferramentas

Ansible Automation Platform

YAML

Descrição da oferta de emprego

You are as unique as your background, experience and point of view. Here, you'll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.

At Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.

When you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.

Discover how you can make a difference in the lives of individuals, families and communities around the world.

Job Description:

Role Summary:

The Security Automation & Orchestration team builds automation that connects and enhances security capabilities across Security Operations. Working across technologies such as SIEM, endpoint security, cloud security, perimeter security, email security, cryptographic security, and other security platforms, the team develops solutions using Splunk SOAR, Python, APIs, and related technologies. Our automation helps monitor the health and configuration of security platforms, process and action security intelligence, identify gaps in security coverage, generate alerts and tickets, collect operational metrics, and remove repetitive manual work. Rather than owning a single security product, the team works across the Security Operations technology ecosystem, partnering with platform and operations teams to improve efficiency, reliability, consistency, and scale.

What will you do?

• In Splunk SOAR, the successful candidate will design, develop, test and maintain complex automation solutions and playbooks using Python , integrating security platforms, APIs and enterprise systems to automate security and operational processes.
• Within the Ansible Automation Platform, design and develop reusable automation workflows and components using YAML to support activities such as account provisioning, certificate management and the deployment and configuration of new systems.
• Act as a senior technical escalation point for the automation platforms, troubleshooting complex application, integration, API, authentication and workflow issues and providing technical guidance during incident resolution.
• Provide technical leadership and mentorship to junior and intermediate engineers , including code reviews, troubleshooting assistance, solution design guidance and the promotion of development and automation best practices.
• Meet with stakeholders to translate business and security requirements into technical designs and automation solutions , identifying opportunities to simplify processes, reduce manual effort and improve reliability.
• Lead the technical design and implementation of automation solutions supporting security initiatives and enterprise-level projects, including proof-of-concept/proof-of-technology activities, evaluation of new capabilities, integration with existing technologies and transition into production.
• Establish and promote development standards and engineering practices for security automation, including source control, code quality, testing, error handling, logging, documentation, reusable components and maintainability.
• Identify and lead continuous improvement opportunities across security platforms and operational processes, including addressing technical debt, improving automation reliability and reducing repetitive manual work.
• Own solutions throughout their lifecycle , including design, development, testing, implementation, production support, maintenance and eventual retirement or replacement.
• Lead the transition and operationalization of project deliverables into BAU, including defining support models, operational procedures, monitoring, RACI documentation, knowledge transfer and technical readiness for teams assuming ongoing support responsibilities.
• Develop and maintain cyber security playbooks, technical documentation, procedures and knowledge-base articles supporting Incident Management, CSIRT and security operations.
• Provide technical consultation and influence solution direction across projects involving security automation and supported security platforms, identifying architectural, operational and integration risks early in the development lifecycle.
• Participate in the team's 24x7 on‑call support rotation and serve as an escalation resource during major incidents , providing advanced troubleshooting, technical consultation, root‑cause analysis and recommendations to prevent recurrence.
• Collaborate with infrastructure, application, security and architecture teams to develop scalable an