Senior Security Platform Engineer

Job Summary:

We are seeking a highly skilled Senior Security Platform Engineer to join our team at Sun Life Financial. As a key member of our security team, you will be responsible for designing, implementing, and monitoring security technologies and projects that support our security policies and procedures.

About the Role:

The Senior Security Platform Engineer (Security Visibility) will be responsible for supporting in-scope platforms and products, developing use case scenarios, and enhancing the security of our corporate and production systems. You will work closely with Enterprise Infrastructure, IT operations, Enterprise Architecture, and application development teams to identify risks to the business and lead security solutions to protect customer and financial information.

Key Responsibilities:

• Deploy and manage one or more security platforms and tools: Perimeter, Endpoints, Crypto, Cloud, Email Security, and Security Visibility.
• Email and Anti Malware Security Technologies.
• Cloud platforms security (CNAPP).
• Intrusion Detection/Prevention System.
• Endpoint Security Solutions (Netskope, CrowdStrike, Semperis).
• Web Application Firewalls (WAF).
• Cryptography, Certificate and Key Management (Hashicorp, Venafi, ISG).
• Security Visibility (SIEM).
• Analyze information systems utilizing various cybersecurity techniques and lead security initiatives and enterprise-level projects implementing security solutions and performing POC/POV for new technologies.
• Able to work independently with a high degree of ambiguity and deliver expected outcomes, be focused on the end deliverables, and build trust with internal clients and peers.
• Responsible for deploying, supporting, and maintaining new and existing security technologies that are deployed within Sun Life and owned and supported by the team.
• Implement risk-driven security controls and provide SME (Subject Matter Expertise) during audits.
• Investigate and respond to security incidents, adhering to defined SLAs. Participate in teams 24x7 on-call support and be required to join major incident management calls to provide support and consultation.
• Identify risks to the business and recommend strategies to address those risks.
• Manage the capacity and resiliency of security systems protecting Sun Life's internal and client data.
• Collaborate and build trust with security peers, vendors, and other Sun Life teams to enhance security posture and best practices.
• A change catalyst for Digital transformation, using JIRA, Confluence, estimating stories, setting definition of done, completing and tracking story updates and assignments.
• Smoothly transition and operationalize projects and products. This includes developing roles & responsibilities (RACI), completing product documentation, and educating the teams who will be performing BAU (Business as usual).
• Document, update, and maintain cybersecurity playbooks, policies, and knowledge base articles used to support the established Incident Management and CSIRT processes.
• Continuously improve operational and security platform processes.

Requirements:

• An Information Technology University degree/college diploma in related discipline(s) or equivalent work experience.
• Minimum 5-7 years of Information security and engineering experience with enterprise-level security technologies in one or more areas of: Perimeter, Endpoints, Crypto, Cloud, Email Security, Security Visibility, and Automation and Orchestration.
• Minimum 3 years of experience in successfully leading global information security projects.
• Preferred: Certification(s) in data network engineering and/or security: CCNP/CCNP-Security, CCSP, CISSP, GIAC-GCIA, GIAC-GCED, CompTIA, or equivalent security certification.
• Experience in managing 3rd party security service providers in delivering security services.
• Broad exposure to multiple security disciplines and in-depth exposure in Incident Response or Detection Engineering.
• Knowledge of a broad range of security controls and risk management frameworks NIST & (ISO) 2700x standards.
• Experience with end-point detection and response, intrusion detection, certificate management, email security, and web content filtering technologies.
• Experience designing secure networks and endpoint systems.
• Experience planning, researching, and developing security policies, standards, and procedures.
• Experience in a system administration role supporting multiple platforms and applications.
• Experience with Windows and Linux-based operating systems.
• Experience in deploying enterprise-level technology via managed projects using Scrum and Kanban methodologies.
• Knowledge of networking technologies, firewalls, web application firewalls, and intrusion detection and prevention systems.
• Knowledge of AWS cloud technologies.
• Knowledge of disaster recovery technologies and methods.
• Strong oral and written communicator with the ability to communicate security technical issues to peers and management.

Individual Skills:

• Problem Solving – Identifies and resolves problems in a timely manner; gathers and analyzes information skillfully; develops alternative solutions. Exceptional troubleshooting skills.
• Analytical – Synthesizes complex or diverse information; collects and researches data.
• Critical Thinking – Uses logic and reasoning to identify alternative solutions/approaches to problems.
• Technical Skills – Pursues training and development opportunities; shares expertise with others; sound knowledge of security technologies for both Cloud and On-Premise.
• Strong leadership and teamwork skills - motivates others to perform well; effectively influences actions of others; accepts feedback from others.
• Ability to communicate complex approaches to various stakeholders resulting in successful outcomes.
• Ability to communicate effectively with senior management and user community, both written and oral.
• Pragmatic understanding of security problems, as a mix of technology and process issues, with the ability to pursue solutions at both layers within the organization.

Additional Skills:

• Proven experience in Data Centre Routing and Switching Technologies – Layer 2 (VLANs, Rapid PVST, SPAN), Firewalls, Layer 3 (OSPF, BGP, MPLS) are a must.
• Proven experience with Infrastructure Visibility related technologies – SIEM, IDS/NDR, Threat simulation tools.
• Strong practical knowledge of AWS and Microsoft Azure cloud technologies and services.
• Extensive knowledge of Information Security principles, protocols, practices, and industry standards.
• Solid understanding of existing and emerging Information Security technologies.
• Self-starter, strategic thinker in maturing deployed security technologies to ensure full capabilities are explored to meet enterprise security requirements.
• Strong hands-on technical skills in both security risks and implementing solutions.
• Strong investigative mindset with acute attention to detail, sense of ownership, urgency, and drive.

Salary Range: $82,000 - $120,000

Job Category: IT - Technology Services

Posting End Date: 26/09/2024

Diversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our clients, the communities where we operate, and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.

Persons with disabilities who need accommodation in the application process or those needing job postings in an alternative format may e-mail a request to

At Sun Life, we strive to create a flexible work environment where our employees are empowered to do their best work. Several flexible work options are available and can be discussed throughout the selection process depending on the role requirements and individual needs.

We thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.