Responsibilities

- Support and manage Splunk Enterprise Security and the Security Visibility platform.
- Develop security use cases, analyze information systems, and implement security solutions and enterprise security projects.
- Maintain deployed security technologies and conduct proof-of-concept and proof-of-value evaluations for recent technologies.
- Investigate and respond to security incidents, participate in 24x7 on-call support, and support major incident management calls.
- Identify business risks, recommend mitigation strategies, and manage the capacity and resiliency of security systems protecting internal and client data.
- Provide security subject-matter expertise during audits and contribute to risk-driven security controls.
- Collaborate with security peers, vendors, infrastructure, operations, architecture, application development, and other teams.
- Use Jira and Confluence to track project work, estimate stories, and manage assignments and completion criteria.
- Transition and operationalize projects by developing responsibilities, documentation, and training for business-as-usual teams.
- Maintain cybersecurity playbooks, policies, procedures, and knowledge base articles supporting incident management and CSIRT processes.
- Continuously improve security platform and operational processes.

Requirements

- A university degree or college diploma in information technology or a related discipline, or equivalent work experience.
- Two to five years of information security and engineering experience with enterprise security technologies.
- Experience with SIEM technologies such as QRadar or Splunk Enterprise Security, IDS/NDR, or threat simulation tools.




- Broad exposure to security disciplines and in-depth experience in incident response or detection engineering.
- Knowledge of security controls, risk management frameworks, NIST, and ISO 2700x standards.
- Experience with endpoint detection and response, intrusion detection, certificate management, email security, and web content filtering technologies.
- Experience planning, researching, and developing security policies, standards, and procedures.
- Experience deploying enterprise technology through managed projects using Scrum and Kanban methodologies.
- Knowledge of networking technologies, firewalls, web application firewalls, intrusion detection and prevention systems, AWS, disaster recovery, and related methods.
- Strong practical knowledge of AWS and Microsoft Azure cloud technologies and services.
- Strong troubleshooting, investigative, analytical, critical-thinking, communication, leadership, teamwork, and problem-solving skills.
- Ability to work independently in ambiguous situations, communicate technical security issues to peers and management, and mature deployed security technologies.
- Ability to obtain Reliability Status Clearance and satisfactorily complete required background checks.

Advantages

- Hybrid work arrangement with the ability to work from home or the office based on business, client, and leader needs.
- Wellness programs supporting mental, physical, and financial health.
- Opportunities to pursue varied career paths and build networking connections.
- Reliability Status Clearance, including a law enforcement inquiry, credit check, and review of qualifying time outside Canada, is required before starting employment.

📌 Security Platform Engineer (SIEM) (Toronto)
🏢 Sun Life Financial
📍 Toronto