Senior Software Developer, Security Automation(Global Security)

RBC; Toronto; On-site; CAD 120,000 - 170,000; Full time

Benefits offered by this job

Total rewards program

Coaching and development

World-class tools and training

Opportunities to do challenging work

Job summary

RBC is seeking a Senior Software Developer to join its Security Automation team in Toronto. You will design, build, test, and deploy automation software powering security operations enterprise-wide. Proficiency in Python, API design, and IaC is essential.

You will own data contracts, build integration playbooks, and maintain CI/CD pipelines while collaborating with SOC analysts and engineers in an agile setting. The role emphasizes reliability, observability, and scalable automation.

Qualifications

• 5+ years of professional software development experience in Python
• REST API design and consumption experience
• Git workflows, code review practices, and CI/CD tooling experience
• Familiarity with pytest/unittest and unit/integration tests
• Working knowledge of Docker, Linux, and CLI tooling
• Experience with JSON, YAML, XML, webhooks, and message queues

Responsibilities

• Automation Software Development: design and develop playbooks, scripts, and workflows in Python
• Write clean, maintainable, well-tested code adhering to coding standards
• Build reusable automation libraries and frameworks
• Integration & API Development: create Python integrations connecting XSOAR to internal systems and APIs
• Implement robust API client patterns including auth, retry, pagination, rate-limiting
• Own data contracts and normalized data models for incidents/telemetry
• CI/CD & DevOps: maintain pipelines for content delivery, testing, deployment
• Manage Git workflows: branching, PR reviews, release management
• Containerize integrations with Docker; manage dev/staging environments
• Platform Engineering & Reliability: administer XSOAR platform, upgrades, monitoring
• Observability: structured logging, health checks, alerting, metrics
• Design scalable patterns for incident classification/enrichment
• Participate in Agile ceremonies and deliver within timelines

Skills

Python

REST API design

Git workflows

CI/CD tooling

Testing frameworks

Docker

Linux

Command-line tooling

Data formats (JSON/YAML/XML)

Tools

Cortex XSOAR

Splunk SOAR

demisto-sdk

XSOAR content development framework

Kafka

Airflow

Spark

Hadoop

SQL/NoSQL databases

Job description

Job Description

What is the opportunity

We are looking for a Senior Software Developer to join our Security Automation team, responsible for engineering and scaling our SOAR platform. This is a development-first role — you will design, build, test, and deploy automation software that powers security operations across the enterprise. The ideal candidate writes production-quality Python, thinks in APIs and data contracts, and treats infrastructure-as-code as a default.

What will you do?

• Automation Software Development - Design and develop automation playbooks, scripts, and orchestration workflows in Python following software engineering best practices (modularity, error handling, logging, testability)

• Write clean, maintainable, and well-tested code that adheres to team coding standards and passes peer review

• Build reusable automation libraries and frameworks that reduce duplication and accelerate future development

• Integration & API Development - Develop custom integrations in Python connecting XSOAR to internal platforms, REST/GraphQL APIs, databases, and third-party security tools

• Implement robust API client patterns — authentication, retry logic, pagination, rate-limiting, and schema validation

• Own the data contracts between systems; design normalized data models for cross-platform incident and telemetry flows

• CI/CD & DevOps Practices - Build and maintain CI/CD pipelines for XSOAR content delivery (linting, unit testing, integration testing, automated deployment)

• Manage version control workflows in Git — branching strategies, pull request reviews, and release management for automation content

• Containerize integrations using Docker; manage development and staging environments for pre-production validation

• Platform Engineering & Reliability -Administer the XSOAR platform — upgrades, performance tuning, high-availability configuration, and monitoring

• Implement observability: structured logging, health checks, alerting on playbook failures, and execution metrics

• Design scalable patterns for incident classification, enrichment pipelines, and response orchestration

• Participate in Agile ceremonies (sprint planning, standups, retrospectives); estimate and deliver work within committed timelines

• Partner with SOC analysts and detection engineers to gather requirements and validate automation outcomes

• Produce technical documentation for integrations, runbooks for operational handoff, and knowledge transfer for the broader team

What do you need to succeed?

Must have:

• 5+ years of professional software development experience in Python

• Strong understanding of REST API design and consumption (authentication patterns, HTTP methods, status codes, payload serialization)

• Experience with Git workflows, code review practices, and CI/CD tooling (Jenkins, GitHub Actions, GitLab CI, or equivalent)

• Familiarity with testing frameworks (pytest, unittest) and writing unit/integration tests as part of the development lifecycle

• Working knowledge of Docker, Linux, and command-line tooling

• Experience with data formats and protocols: JSON, YAML, XML, webhooks, message queues

Nice to have:

• Prior experience with Cortex XSOAR (Demisto), Splunk SOAR, or similar orchestration platforms

• Familiarity with security concepts: incident response workflows, MITRE ATT&CK, threat intelligence, vulnerability management

• Experience with demisto-sdk or XSOAR content development framework

• Experience with big data technologies — data lakes, distributed processing frameworks (Spark, Hadoop), or large-scale data pipelines (Kafka, Airflow) for ingesting and correlating high-volume security telemetry

• Exposure to AI/ML concepts — working with LLMs, building AI-assisted workflows, prompt engineering, or integrating AI models into automation pipelines for tasks such as alert triage, anomaly detection, or natural language-driven investigation

• Exposure to databases (SQL/NoSQL) and data pipeline tools

• Background in building integrations with enterprise tools (ServiceNow, Jira, SIEM platforms, identity providers)

What’s in it for you?

We thrive on the challenge to be our best, progressive thinking to keep growing, and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.

• A comprehensive Total Rewards Program including bonuses and flexible benefits, competitive compensation, commissions, and stock where applicable

• Leaders who support your development through coaching and managing opportunities

• Support from a dynamic, collaborative, progressive, and high performing team, as well as world-class tools and training

• Ability to make a difference and lasting impact

• Work in a dynamic, collaborative, progressive, and high-performing team

• A world-class training program in financial services

• Opportunities to do challenging work

#LI-POST
#TECHPJ

Job Skills

Information Technology (IT) Infrastructure, Programming Languages, Software Change Request Management, Software Development Life Cycle (SDLC), Software Engineering, Software Integration Engineering, Software Product Design, Software Product Technical Knowledge, Software Release Management, System Testing Tools

Additional Job Details

Address:

16 YORK ST:TORONTO

City:

Toronto

Country:

Canada

Work hours/week:

37.5

Employment Type:

Full time

Platform:

TECHNOLOGY AND OPERATIONS

Job Type:

Regular

Pay Type:

Salaried

Posted Date:

2026-08-25

Application Deadline:

2026-09-08

Note** : ** Applications will be accepted until 11:59 PM on the day prior to the application deadline date above

Our Employment Opportunities

At RBC, we are guided by living shared values of Client First, Integrity, Collaboration, Respect and Excellence and winning together as One RBC. We believe an inclusive workplace that has diverse perspectives is core to our continued growth as one of the largest and most successful banks in the world. Maintaining a workplace where our employees feel supported to perform at their best, effectively collaborate, drive innovation, and grow professionally helps to bring our Purpose to life and create value for our clients and communities. RBC strives to deliver this through policies and programs intended to foster a workplace based on respect, belonging and opportunity for all.

Join our Talent Community

Stay in-the-know about great career opportunities at RBC. Sign up and get customized info on our latest jobs, career tips and Recruitment events that matter to you.

Expand your limits and create a new future together at RBC. Find out how we use our passion and drive to enhance the well-being of our clients and communities at jobs.rbc.com.