{"id":2963456,"url":"https://alion.io/job/sun-life-hong-kong-senior-security-platform-developer-security-automation-python-splunk-soar","title":"Senior Security Platform Developer, Security Automation (Python, Splunk SOAR)","company":{"id":2200035,"name":"Sun Life Hong Kong","domain":"sunlife.com.hk","url":"https://alion.io/company/sunlife-com-hk","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":93,"open_postings":25,"ghost_share":0,"stale_share":0.48,"repost_share":0,"time_to_fill_p50_days":13,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Toronto, Canada","Waterloo, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":70000,"max_usd":126000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":225},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Git","optional":false},{"name":"Incident Management","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Cortex","optional":true},{"name":"Cortex XSOAR","optional":true},{"name":"Linux","optional":true},{"name":"Prometheus","optional":true},{"name":"Windows","optional":true}],"status":"live","first_seen_at":"2026-10-20T23:28:54Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-21T22:18:35Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"You are as unique as your background, experience and point of view. Here, you’ll be encouraged, empowered and challenged to be your best self. You'll work with dynamic colleagues - experts in their fields - who are eager to share their knowledge with you. Your leaders will inspire and help you reach your potential and soar to new heights. Every day, you'll have new and exciting opportunities to make life brighter for our Clients - who are at the heart of everything we do.\nAt Sun Life, we're driven by our Purpose: helping our Clients achieve lifetime financial security and live healthier lives. Our values shape how we work: caring, authentic, bold, inspiring, and impactful.\nWhen you join Sun Life, you'll work with passionate colleagues and empowering leaders who support your growth and celebrate your contributions, so you can make a meaningful difference in our Clients' lives.\nDiscover how you can make a difference in the lives of individuals, families and communities around the world.\nJob Description:\nRole Summary:\n\n The Security Automation & Orchestration team builds automation that connects and enhances security capabilities across Security Operations. Working across technologies such as SIEM, endpoint security, cloud security, perimeter security, email security, cryptographic security, and other security platforms, the team develops solutions using Splunk SOAR, Python, APIs, and related technologies. Our automation helps monitor the health and configuration of security platforms, process and action security intelligence, identify gaps in security coverage, generate alerts and tickets, collect operational metrics, and remove repetitive manual work. Rather than owning a single security product, the team works across the Security Operations technology ecosystem, partnering with platform and operations teams to improve efficiency, reliability, consistency, and scale.\nWhat will you do?\n\nIn Splunk SOAR, the successful candidate will design, develop, test and maintain complex automation solutions and playbooks using Python, integrating security platforms, APIs and enterprise systems to automate security and operational processes.\nWithin the Ansible Automation Platform, design and develop reusable automation workflows and components using YAML to support activities such as account provisioning, certificate management and the deployment and configuration of new systems.\nAct as a senior technical escalation point for the automation platforms, troubleshooting complex application, integration, API, authentication and workflow issues and providing technical guidance during incident resolution.\nProvide technical leadership and mentorship to junior and intermediate engineers, including code reviews, troubleshooting assistance, solution design guidance and the promotion of development and automation best practices.\nMeet with stakeholders to translate business and security requirements into technical designs and automation solutions, identifying opportunities to simplify processes, reduce manual effort and improve reliability.\nLead the technical design and implementation of automation solutions supporting security initiatives and enterprise-level projects, including proof-of-concept/proof-of-technology activities, evaluation of new capabilities, integration with existing technologies and transition into production.\nEstablish and promote development standards and engineering practices for security automation, including source control, code quality, testing, error handling, logging, documentation, reusable components and maintainability.\nIdentify and lead continuous improvement opportunities across security platforms and operational processes, including addressing technical debt, improving automation reliability and reducing repetitive manual work.\nOwn solutions throughout their lifecycle, including design, development, testing, implementation, production support, maintenance and eventual retirement or replacement.\nLead the transition and operationalization of project deliverables into BAU, including defining support models, operational procedures, monitoring, RACI documentation, knowledge transfer and technical readiness for teams assuming ongoing support responsibilities.\nDevelop and maintain cyber security playbooks, technical documentation, procedures and knowledge-base articles supporting Incident Management, CSIRT and security operations.\nProvide technical consultation and influence solution direction across projects involving security automation and supported security platforms, identifying architectural, operational and integration risks early in the development lifecycle.\nParticipate in the team's 24x7 on-call support rotation and serve as an escalation resource during major incidents, providing advanced troubleshooting, technical consultation, root-cause analysis and recommendations to prevent recurrence.\nCollaborate with infrastructure, application, security and architecture teams to develop scalable and supportable integrations between security platforms and enterprise systems.\nDrive automation maturity within the team by identifying opportunities for reusable frameworks, common libraries and standardized integration patterns rather than developing one-off solutions.\nWhat you need to succeed?\n\n5+ years of Python development experience, with demonstrated experience designing, developing, testing and supporting production-level automation and integrations.\nAn Information Technology university degree/college diploma in a related discipline, or equivalent combination of education and 7+ years of relevant Information Technology experience.\n5+ years of experience within Cyber Security, Security Engineering, Platform Engineering, DevOps or a related technical discipline.\nStrong experience developing and integrating solutions using REST APIs, JSON, authentication mechanisms and enterprise systems, with the ability to independently troubleshoot complex integration issues.\nStrong understanding of software development practices, including source control (Git), code reviews, testing, error handling, logging, debugging and maintainable software design.\nDemonstrated ability to act as a technical escalation point, independently diagnosing complex problems and providing technical direction during production incidents and major incident situations.\nProfessional designation in IT or Cyber Security, such as CISSP, CISM, CISA, GIAC, AWS or CompTIA Security+, is preferred.\nPreferred skills:\n\nExperience with SOAR tools (Splunk SOAR, Cortex XSOAR, etc)\nDevelopment experience 5+ years (Python, YAML, etc)\nExperience with Ansible development.\nExperience planning, researching, and developing security policies, standards, and procedures.\nKnowledge of one or more: end-point detection and response, intrusion detection, crypto technologies, certificate management, email security, web content filtering technologies, cloud security.\nKnowledge of Security Information and Event Management platforms including log types.\nExperience with Windows and Linux based operating systems.\nExperience in deploying enterprise level technology via managed projects.\nKnowledge of networking technologies, firewalls, web application firewalls and intrusion prevention systems.\nKnowledge of cloud technologies.\nKnowledge of disaster recovery, technologies, and methods.\nStrong communicator spoken and written with the ability to communicate technical issues to peers and management.\nMust be able to satisfactorily complete applicable background checks prior to the start date and during employment, in accordance with Sun Life’s policies and practices.\n\nWhat’s in it for you:\nWe’re honoured to be recognized as a 2026 Best Workplaces in Canada by Great Place to Work® Canada.\nWe are thrilled to be recognized by Excellence Canada with their top-level certification, the Canada Order of Excellence for Mental Health at Work®, for prioritizing employee well-being, fostering a positive work culture, and achieving excellence in mental health.\nWellness programs that support the three pillars of your health - mental, physical, and financial\nThe opportunity to move along a variety of career paths with amazing networking potential.\nAs a hybrid organization, you and your leader use business and Client needs to choose where you work, at home or in the office\nThe Base Pay range is for the primary location for which the job is posted. It may vary depending on the work location of the successful candidate or other factors. In addition to Base Pay, eligible Sun Life employees participate in various incentive plans, payment under which is discretionary and subject to individual and company performance. Certain sales focused roles have sales incentive plans based on individual or group sales results.\nDiversity and inclusion have always been at the core of our values at Sun Life. A diverse workforce with wide perspectives and creative ideas benefits our Clients, the communities where we operate and all of us as colleagues. We welcome applications from qualified individuals from all backgrounds.\nPersons with disabilities who need accommodation in the application process, or those needing job postings in an alternative format, may e-mail a request to .\nWe are proud to be a hybrid organization that offers our employees the choice and flexibility to work from both the office and virtually based on the needs of the business, our Clients and you.\nWe may use artificial intelligence to support candidate sourcing, screening, interview scheduling.\nWe thank all applicants for showing an interest in this position. Only those selected for an interview will be contacted.\nSalary Range:\n100,000/100 000 - 143,000/143 000Job Category:\nIT - Technology ServicesPosting End Date:\n26/10/2026","description_format":"text","description_chars":9791,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":["Wellness"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Wealth Management & Financial Advisors","Asset Management & Funds","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-10-20T23:28:54Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":13,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/sun-life-hong-kong-senior-security-platform-developer-security-automation-python-splunk-soar","json_url":"https://alion.io/job/sun-life-hong-kong-senior-security-platform-developer-security-automation-python-splunk-soar.json","meta":{"generated_at":"2026-10-21T23:40:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33757,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2200035},"rest":"https://alion.io/mcp/rest/get_company?id=2200035"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsun-life-hong-kong-senior-security-platform-developer-security-automation-python-splunk-soar"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsun-life-hong-kong-senior-security-platform-developer-security-automation-python-splunk-soar"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsun-life-hong-kong-senior-security-platform-developer-security-automation-python-splunk-soar"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sun-life-hong-kong-senior-security-platform-developer-security-automation-python-splunk-soar\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsun-life-hong-kong-senior-security-platform-developer-security-automation-python-splunk-soar"}]}