Senior Cloud Security Engineer

Job summary

The Senior Cloud Security Engineer is responsible for securing cloud, SaaS, AI, and data ecosystems through the implementation and operation of robust security controls. This role involves partnering with cross-functional teams to perform threat modeling, conduct security assessments, and improve the organization's cyber resilience.

Job details

As one of the world’s leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco. Job Description Your Role The Senior Cloud Security Engineer is responsible for securing Invesco's cloud, SaaS, AI, and data ecosystems through the implementation, operation, and continuous improvement of security controls that reduce organizational risk and strengthen cyber resilience. This role partners with engineering, architecture, infrastructure, application, and cybersecurity teams to identify and reduce attack paths, protect critical assets, improve security posture, and ensure cloud technologies are implemented in accordance with enterprise security standards. You Will Be Responsible For ber events. Conducting SaaS security assessments and security reviews to ensure cloud and third-party platforms meet Invesco security requirements. Implementing data protection controls across cloud and SaaS platforms, including DLP, DSPM, encryption, access controls, and data governance integrations. Performing threat modeling and security design reviews for emerging technologies, cloud services, and AI-enabled solutions. Leveraging automation and Infrastructure-as-Code to improve security control deployment, consistency, and operational efficiency. Supporting security incident response, threat investigations, and remediation activities within cloud and SaaS environments. Partnering with Cyber Defense, IAM, Infrastructure, and Application teams to continuously improve overall security posture and resilience. The Experience you Bring: 5+ years of cybersecurity, information security, or security engineering experience supporting enterprise-scale environments. 3+ years of focused cloud security engineering experience across AWS, Azure, Oracle Cloud, and SaaS platforms. Experience implementing cloud security posture management, SaaS security posture management, and cloud-native security controls. Hands-on experience with Wiz, Falcon Shield SSPM, DSPM, CASB, DLP, and cloud security technologies. Strong understanding of attack path analysis, threat modeling, cloud identity security, privilege risk management, and containment strategies. Experience securing AI capabilities, cloud-native applications, containers, Kubernetes, and modern application architectures. Experience implementing data protection controls, including DLP, DSPM, encryption, data classification, and sensitive data governance. Experience with Terraform, automation, scripting, and Infrastructure-as-Code practices. Experience supporting regulatory and security frameworks including NIST, ISO 27001, CSA, SOC1/2, GDPR, DORA, and SOX. Strong communication skills with the ability to translate technical risks into business-focused outcomes. \Reduce exposure to cloud, SaaS, AI, and data-related threats. Identify and remediate attack paths before they can be exploited. Protect critical business services, sensitive data, and privileged identities from modern attack scenarios. Improve the organization's ability to detect, contain, and recover from cyber events. Enable secure business growth through cloud, SaaS, and AI adoption. The salary range for this position in PEI is $90,000-100,000 CAD per year. The total compensation offered for this position includes salary and incentive pay and will vary based on skills, experience and location Full Time / Part Time Full time Worker Type Employee Job Exempt (Yes / No) No Workplace Model Pursuant to Invesco’s Workplace Policy, employees are expected to comply with the firm’s most current workplace model, which as of October 1, 2025, includes spending at least four full days each week working in an Invesco office. This reflects our belief that spending time together in the office helps us build stronger relationships, collaborate more easily, and support each other’s growth and development. What’s in it for you? Our people are at the very core of our success and we strive to provide employees with a competitive total rewards package which includes: Hybrid working environment RRSP Contributions Health & Wellness Benefits Work flexibility Programs Parental Leave Benefits Study Support The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time. Invesco is committed to fair and accessible employment practices. If selected for an interview, we will work with you to ensure that your interview is accessible and accommodation is provided. Please contact us at accessibility@invesco.ca or 1.800.874.6275 to let us know if you require accommodation for an interview due to a disability.

What you’ll do

The Senior Cloud Security Engineer is responsible for securing cloud, SaaS, AI, and data ecosystems through the implementation and operation of robust security controls. This role involves partnering with cross-functional teams to perform threat modeling, conduct security assessments, and improve the organization's cyber resilience.

Requirements

Candidates must have at least 5 years of cybersecurity experience, including 3 years of focused cloud security engineering across AWS, Azure, and SaaS platforms. Proficiency in cloud-native security tools, automation, and regulatory frameworks like NIST and ISO 27001 is required.

Benefits

• Hybrid working environment
• RRSP Contributions
• Health & Wellness Benefits
• Work flexibility Programs
• Parental Leave Benefits
• Study Support

Listed skills

• Microsoft Azure · Preferred
• Kubernetes · Preferred
• Amazon Web Services · Preferred
• Terraform · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cloud Security
• SaaS Security
• AWS
• Azure
• Oracle Cloud
• Wiz
• Falcon Shield SSPM
• DSPM
• CASB
• DLP
• Threat Modeling
• Infrastructure-as-Code
• Terraform
• Kubernetes
• Identity Security
• Data Governance
• Falcon
• Cyber Defense
• Operational Efficiency
• Cloud-Native Computing
• Cloud Services
• General Data Protection Regulation (GDPR)
• Cloud-Native Applications
• AI Adoption
• Emerging Technologies
• Resilience
• Cyber Resilience
• Technology Ecosystems
• Infrastructure as Code (IaC)
• Cloud Access Security Broker Tools (CASBs)
• Access Controls
• Amazon Web Services
• Automation
• Microsoft Azure
• Management
• Software As A Service (SaaS)
• Communication
• Continuous Improvement Process
• Security Controls
• Cyber Security
• Information Privacy
• Encryption
• Incident Response
• Enterprise Security
• Investment Management
• Security Engineering
• ISO/IEC 27001
• Risk Management
• Security Requirements Analysis
• Sarbanes-Oxley Act (SOX) Compliance

Job areas

• Technology
• Security & Safety
• Finance & Accounting
• Software
• Data & Analytics
• Cloud Security Engineer
• Cyber Security Engineer
• Database and Network Professionals Not Elsewhere Classified
• Information Security Engineers
• Computer Occupations, All Other

More jobs from Invesco