Principal Cloud Security Engineer
BMO Financial Group2 months ago
Base Salary
$122k - $228k/yr
Responsibilities
- Assess, design, implement, automate, and document security solutions and controls for AWS and Microsoft Azure.
- Develop cloud security patterns, roadmaps, baseline controls, policies as code, and CI/CD-integrated security practices.
- Review and approve security-sensitive code and changes involving IAM roles, policies, security groups, and related controls.
- Define and implement security frameworks for AI/ML systems across data ingestion, training, deployment, and monitoring.
- Assess and mitigate AI threats including adversarial attacks, model inversion, data poisoning, prompt injection, model theft, jailbreaking, and data leakage.
- Secure AI/ML platforms and tools, including model registries, feature stores, training environments, inference endpoints, and MLOps pipelines.
- Implement data security posture management and controls for databases, data lakes, data warehouses, sensitive data, and file-sharing platforms.
- Lead cybersecurity risk assessments, provide security guidance for technology projects, and advise on cloud, AI, and data security risks.
- Assist with investigation and remediation of security incidents, including AI model compromise and data breaches.
- Serve as a cloud security subject matter expert and collaborate with information security, product, software development, data science, AI engineering, and cloud engineering teams.
- Lead workshops, influence senior leadership, articulate complex security concepts, and mentor less experienced team members.
Requirements
- A university degree in Engineering, Computer Science, Information Technology, or a related field.
- 7–10 years of experience developing and implementing security architectures and/or engineering across cloud, data, and/or AI security domains.
- Security certifications such as CISSP, CCSP, CCSK, AWS Certified Security Specialty, or Microsoft Certified: Azure Security Engineer Associate.
- Knowledge of cloud architecture, cloud operations, cloud IAM, security automation, orchestration, and cloud-native security tools.
- Knowledge of CSA CCM, ISO 27001, ISO 27017, and NIST CSF security control and compliance frameworks.
- Working knowledge of AI/ML frameworks and platforms and familiarity with OWASP Top 10 for LLMs, MITRE ATLAS, and NIST AI RMF.
- Experience with DLP, data classification, data access governance, DSPM, encryption, tokenization, and key management.
- Familiarity with PIPEDA, GDPR, and CCPA and experience securing cloud data platforms such as Snowflake, Databricks, AWS Redshift, or Azure Synapse.
- Strong networking, packet analysis, cryptography, IAM, scripting, programming, API, webhook, and Infrastructure as Code security skills.
- Experience with Python, PowerShell, Bash, Node.js, Checkov, tfsec, Prisma Cloud, Wireshark, Burp Suite, nmap, Nessus, and Metasploit.
- Preferred knowledge or certifications in AI security or data security, including CDAI, CompTIA AI+, CDPSE, or CIPP.
- Strong communication, leadership, research, analytical, problem-solving, relationship-building, workshop facilitation, and stakeholder-influence skills.
Benefits
- Health insurance, tuition reimbursement, accident and life insurance, and retirement savings plans.
- Training, coaching, manager support, and network-building opportunities.
- Salaried position with a stated base salary range of $122,400.00–$228,000.00.
- Opportunity to shape cloud, AI, and data security strategy at a major Canadian financial institution.
Categories
About BMO Financial Group
BMO Financial Group is a publicly traded North American bank offering personal and commercial banking, wealth management, and capital markets services to consumers, businesses, and institutions. Founded in 1817 and headquartered in Toronto, it operates in Canada and the United States, including BMO Bank N.A. in the U.S. The company is listed on the NYSE and TSX under the symbol BMO.