Security Platform Engineer, SIEM

Sun Life

. Support and manage the SIEM (Splunk Enterprise Security) within the Security Visibility squad .

Posted 9/29/2026full-timeToronto • CanadaJuniorMid-Level💰 CA$65,000 - CA$105,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing SIEM technologies, particularly Splunk Enterprise Security, and implementing risk-driven security controls. Proficient in incident response, security policy development, and utilizing cloud technologies such as AWS and Microsoft Azure.

Highest-signal resume keywords

SIEM ManagementIncident ResponseSecurity Policy DevelopmentAWS Cloud TechnologiesScrum and Kanban Methodologies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecuritySecurity EngineeringRisk Management FrameworksEndpoint Detection and ResponseIntrusion DetectionEmail SecurityWeb Content FilteringSecurity ControlsThreat Simulation ToolsCybersecurity Techniques

Soft Skills

TroubleshootingAnalytical SkillsCritical ThinkingCommunicationTeamwork

Tools & Technologies

Splunk Enterprise SecurityJIRAConfluenceAWSMicrosoft AzureNIST StandardsISO 2700x StandardsDisaster Recovery TechnologiesIntrusion Detection and Prevention SystemsAutomation and Orchestration

Certifications & Qualifications

Reliability Status Clearance

Industry Keywords

CybersecurityIncident ManagementSecurity VisibilityDigital TransformationSecurity PostureCapacity ManagementResiliencyManaged ProjectsSecurity TechnologiesBusiness Risk Mitigation

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsSplunk

About the role

Key responsibilities & impact

Support and manage the SIEM (Splunk Enterprise Security) within the Security Visibility squad
Analyze information systems using cybersecurity techniques and lead security initiatives and enterprise-level projects
Implement security solutions and perform POC/POV for new technologies
Support and maintain security technologies deployed within Sun Life and owned by Security Visibility
Implement risk-driven security controls and provide subject-matter expertise during audits
Investigate and respond to security incidents according to defined SLAs
Participate in 24x7 on-call support and major incident management calls
Identify business risks and recommend mitigation strategies
Manage the capacity and resiliency of security systems protecting internal and client data
Collaborate with security peers, vendors, and Sun Life teams to improve security posture and best practices
Use JIRA and Confluence for digital transformation, story estimation, definitions of done, and tracking updates and assignments
Transition and operationalize projects and products, including RACI development, documentation, and educating BAU teams
Maintain cybersecurity playbooks, policies, and knowledge base articles supporting Incident Management and CSIRT processes
Continuously improve operational and security platform processes

Requirements

What you’ll need

Information Technology university degree/college diploma in related disciplines or equivalent work experience
Minimum 2–5 years of information security and engineering experience with enterprise-level security technologies
Experience in one or more areas: Perimeter, Endpoints, Crypto, Cloud, Email Security, Security Visibility, and Automation and Orchestration
Experience with SIEM (QRadar or Splunk ES), IDS/NDR, or threat simulation tools
Broad exposure to multiple security disciplines and in-depth exposure to Incident Response or Detection Engineering
Knowledge of security controls and risk management frameworks including NIST and ISO 2700x standards
Experience with endpoint detection and response, intrusion detection, certificate management, email security, and web content filtering technologies
Experience planning, researching, and developing security policies, standards, and procedures
Experience deploying enterprise-level technology through managed projects using Scrum and Kanban methodologies
Knowledge of networking technologies, firewalls, web application firewalls, and intrusion detection and prevention systems
Knowledge of AWS cloud technologies
Knowledge of disaster recovery technologies and methods
Strong knowledge of security technologies for Cloud and On Premise environments
Strong practical knowledge of AWS and Microsoft Azure cloud technologies and services
Solid understanding of existing and emerging Information Security technologies
Must obtain Reliability Status Clearance within a reasonable time as a condition of employment
Must satisfactorily complete applicable background checks before starting and during employment
Strong troubleshooting, investigative, analytical, critical-thinking, communication, leadership, and teamwork skills

Benefits

Comp & perks

Wellness programs supporting mental, physical, and financial health
Career paths with networking potential
Hybrid work flexibility from home or office
Reliability Status Clearance support/requirement
Accommodation for applicants with disabilities
Incentive plans for eligible employees, subject to individual and company performance