Senior Security Platform Engineer Security

Senior Security Platform Engineer Security (Akamai Security) Join to apply for the Senior Security Platform Engineer Security (Akamai Security) role at Sun Life . Job Description The Senior Security Platform Engineer is responsible for effectively planning, designing, implementing, and monitoring security technologies and projects that support Sun Life’s security policies and procedures. Your primary responsibilities will be supporting in-scope platform and products and developing use case scenarios, enhancing the security of Sun Life’s corporate and production systems. You will work closely with Enterprise Infrastructure, IT operations, Enterprise Architecture, and application development teams to identify risks to the business and lead security solutions to protect customer and financial information. What will you do? Analyze information systems utilizing various cybersecurity techniques and lead security initiatives and enterprise level projects implementing security solutions and performing POC/POV for new technologies. Able to work independently with high degree of ambiguity and deliver expected outcomes, be focused on the end deliverables, and build trust with internal clients and peers. Responsible to deploy, support and maintain new and existing security technologies that are deployed within Sun Life and owned and supported by the team. Implement risk driven security controls and provide SME (Subject Matter Expertise) during Audit. Investigate and respond to security incidents, adhering to defined SLA’s. Participate in teams 24x7 on‑call support and be required to join major incident management calls to provide support and consultation. Identify risks to the business and recommend strategies to address those risks. Manage the capacity and resiliency of security systems protecting Sun Life’s internal and client data. Collaborate and build trust with security peers, vendors, and other Sun Life teams to enhance security posture and best practices. A change catalyst for Digital transformation, using JIRA, Confluence, estimating stories, setting definition of done, completing and tracking story updates and assignments. Smoothly transition and operationalize projects and products. This includes developing RACI, completing product documentation and educating the teams who will be performing BAU the day‑to‑day work. Document, update and maintain cyber security playbooks, policies and knowledge base articles used to support the established Incident Management and CSIRT processes. Continuously improve operational and security platform processes. What you need to succeed? An Information Technology University degree/college diploma in related discipline(s) or equivalent work experience. Minimum 5-7 years Information security and engineering experience with enterprise level security technologies in the one or more areas of Perimeter, Endpoints, Crypto, Cloud, Email Security, Security Visibility, and Automation and Orchestration. Minimum 3 year experience in successfully leading global information security projects. Preferred: Certification(s) in data network engineering and/or security: CCNP/CCNP‑Security, CCSP, CISSP, GIAC‑GCIA, GIAC‑GCED, Comptia or equivalent security certification. Experience in managing 3rd party security service providers in delivering security services. Broad exposure to multiple security disciplines and in-depth exposure in Incident Response or Detection Engineering. Knowledge of a broad range of security controls and risk management frameworks NIST & ISO 2700x standards. Experience with endpoint detection and response, intrusion detection, certificate management, email security and web content filtering technologies. Experience designing secure networks and endpoint systems. Experience planning, researching, and developing security policies, standards, and procedures. Experience in a system administration role supporting multiple platforms and applications. Experience with Windows and Linux based operating systems. Experience in deploying enterprise level technology via managed projects using Scrum and Kanban methodologies. Knowledge of networking technologies, firewalls, web application firewalls and intrusion detection and prevention systems. Knowledge of AWS cloud technologies. Knowledge of disaster recovery, technologies, and methods. Strong oral and written communicator with the ability to communicate security technical issues to peers and management. Required Skills Security Content Platform Leadership: Serve as the subject matter expert for Akamai’s security products, including WAF, Kona Site Defender, Bot Manager, and Prolexic DDoS protection. Architect and Optimize: Design and implement scalable and secure architectures for web applications using Akamai’s security solutions. Continuously tune and enhance Akamai configurations for optimal security and performance. Threat Detection & Response: Lead the monitoring, identification, and mitigation of real‑time security threats, including bot attacks, DDoS campaigns, and web‑based exploits. Develop response playbooks and automated remediation workflows. Custom Rule Development: Oversee the development and fine‑tuning of custom rules and policies for Akamai WAF, tailoring security controls to evolving threats while maintaining application performance. Security Automation: Lead efforts to automate security processes and policy management using tools and scripting languages (e.g., Python, Bash). Implement automation for the continuous deployment of security updates. Cross‑Functional Collaboration: Act as a liaison between security, DevOps, application development, and infrastructure teams to align Akamai security solutions with business requirements and performance objectives. Mentorship & Leadership: Provide technical mentorship and guidance to junior engineers and security team members, sharing best practices and driving continuous improvement in security operations. Incident Management & Forensics: Lead post‑incident investigations, ensuring root cause analysis is performed, lessons are learned, and appropriate remediation steps are taken. Reporting & Compliance: Ensure compliance with relevant regulations (e.g., PCI‑DSS, GDPR) through robust security configurations and reporting mechanisms. Prepare and deliver detailed security metrics and reports to senior leadership. Continuous Improvement: Stay updated on the latest web security threats, Akamai product advancements, and industry best practices. Continuously evaluate and recommend improvements to existing security architectures. Project Leadership: Lead key security projects, including large‑scale migrations, upgrades, and the introduction of new Akamai features or services. Ensure timely delivery and adherence to high standards of security. What’s in it for you We’re honored to be recognized as a 2024 Best Workplace in Ontario by Great Place to Work® Canada. We’re proud to be recognized as a company with a 2023 Most Trusted Executive team by Great Place to Work® Canada. Wellness programs that support the three pillars of your health – mental, physical, and financial. The opportunity to move along a variety of career paths with amazing networking potential. As a hybrid organization, you and your leader choose where you work, at home or in the office. Salary Range 90,000 – 140,000 Job Category IT – Technology Services Posting End Date 23/10/2025 Location Waterloo, Ontario, Canada Employment Type Full‑time Seniority level Not Applicable Job function Engineering and Information Technology #J-18808-Ljbffr