Principal Cloud Security Engineer
BMO Financial Group2 hours ago
Toronto, CanadaStaff+
Responsibilities
- Assess, design, implement, automate, and document security solutions and controls for AWS and Microsoft Azure.
- Define cloud security patterns, roadmaps, operating models, baseline controls, and policies as code integrated into CI/CD processes.
- Review and approve security-sensitive code and changes involving IAM roles, policies, security groups, and cloud implementations.
- Define and implement security frameworks for AI/ML systems across data ingestion, training, deployment, and monitoring.
- Assess and mitigate AI threats including adversarial attacks, model inversion, data poisoning, prompt injection, model theft, jailbreaking, and data leakage.
- Secure AI/ML platforms and tools, and integrate security controls into MLOps pipelines for model integrity, access control, and auditability.
- Implement and manage DSPM tools and data security controls for databases, data lakes, data warehouses, and file-sharing platforms.
- Lead cybersecurity risk assessments, provide security guidance to technology projects, and advise senior leadership on cybersecurity, AI risk, privacy, and investment strategies.
- Assist with investigation and remediation of security incidents, including AI model compromise and data breaches.
- Lead workshops, mentor less experienced team members, and collaborate with information security, product, software development, infrastructure, AI, and data teams.
Requirements
- University degree in Engineering, Computer Science, Information Technology, or a related field.
- 7–10 years of experience developing and implementing security architectures and/or engineering across cloud, data, and/or AI security domains.
- Security certification such as CISSP, CCSP, CCSK, AWS Certified Security Specialty, or Microsoft Certified: Azure Security Engineer Associate.
- Knowledge of cloud architecture, cloud operations, cloud IAM, security automation, orchestration, cloud-native security tools, and compliance frameworks.
- Working knowledge of AI/ML development frameworks and platforms, AI security risks, MLOps pipeline security, OWASP Top 10 for LLMs, MITRE ATLAS, and NIST AI RMF.
- Experience with DLP, data classification, data access governance, DSPM, encryption, tokenization, key management, data privacy regulations, and cloud-based data platforms.
- Knowledge of networking, packet analysis, cryptography, IAM, SSO, SAML, federated identity, RBAC, OAuth/OIDC, and API/webhook development.
- Strong scripting and programming skills using Python, PowerShell, Bash, and Node.js.
- Experience with infrastructure-as-code security scanning tools such as Checkov, tfsec, and Prisma Cloud.
- Preferred qualifications include AI security or data security certifications or training such as CDAI, CompTIA AI+, CDPSE, or CIPP.
- Strong communication, leadership, research, analytical, problem-solving, relationship-building, workshop facilitation, and mentoring skills.
Benefits
- Full-time salaried position with a stated salary range of $103,200.00–$192,000.00.
- Health insurance, tuition reimbursement, accident and life insurance, retirement savings plans, and other perks and rewards.
- Training, coaching, manager support, and network-building opportunities.
- Inclusive, equitable, and accessible workplace with accommodations available upon request.
Categories