Security Analyst

Application Security Analyst

Duration: August 10, 2026 – April 9, 2027

Location: 1 York Street, Toronto, Ontario, M5J 0B6

Work Arrangement: Hybrid — primarily remote; onsite 1–2 times per quarter (optional additional visits)

Seniority Level: Hands-on analyst; not a senior or leadership role. Requires 2–3 years of application security experience and comfort working directly with tools and technical teams.

• Job description
• The successful candidate will play a critical role in Sun Life to advance DevSecOps. In this position the incumbent will lead the evaluation, creations and implementation of application security tools, processes within the CI/CD Pipeline's globally. The successful candidate must not only understand the cyber security issues associated with application design and implementation but also must be willing to embrace a development attitude as they will be working closely alongside developers and other DevOps professionals to achieve a secure role out of DevSecOps across Sun Life's major operating geographies globally.

Critical Skills / Must-Haves:

• 2+ yrs in IT Design/Application Design & Implementation
• 3+ yrs Cyber Application Security experience
• 1+ yrs automating systems, designing automation.
• Software development background (C++/Java/.NET) (2+ yrs)
• Experience in managing Application Security platforms SAST/DAST/SCA/MOBILE (1+yrs)
• Solid understanding of DevSecOps and Agile Security concepts.
• Hands on experience with SAST, SCA, DAST, MAST tools and techniques
• Expert knowledge of OWASP top 10 (Web, Mobile, APIs) and SANS top 25