Principal Cloud Security Engineer
BMO Financial Group2 months ago
Toronto, CanadaStaff+
Responsibilities
- Assess, design, implement, automate, and document security solutions and controls for AWS and Microsoft Azure.
- Define cloud security patterns, roadmaps, operating models, baseline controls, and policies as code integrated into CI/CD processes.
- Review and approve security-sensitive code and changes involving IAM roles, policies, security groups, and cloud implementations.
- Define and implement security frameworks for AI/ML systems across data ingestion, training, deployment, and monitoring.
- Assess and mitigate AI threats including adversarial attacks, model inversion, data poisoning, prompt injection, model theft, jailbreaking, and data leakage.
- Secure AI/ML platforms and tools, and integrate security controls into MLOps pipelines for model integrity, access control, and auditability.
- Implement and manage DSPM tools and data security controls for databases, data lakes, data warehouses, and file-sharing platforms.
- Lead cybersecurity risk assessments, provide security guidance to technology projects, and advise senior leadership on cybersecurity, AI risk, privacy, and investment strategies.
- Assist with investigation and remediation of security incidents, including AI model compromise and data breaches.
- Lead workshops, mentor less experienced team members, and collaborate with information security, product, software development, infrastructure, AI, and data teams.
Requirements
- University degree in Engineering, Computer Science, Information Technology, or a related field.
- 7–10 years of experience developing and implementing security architectures and/or engineering across cloud, data, and/or AI security domains.
- Security certification such as CISSP, CCSP, CCSK, AWS Certified Security Specialty, or Microsoft Certified: Azure Security Engineer Associate.
- Knowledge of cloud architecture, cloud operations, cloud IAM, security automation, orchestration, cloud-native security tools, and compliance frameworks.
- Working knowledge of AI/ML development frameworks and platforms, AI security risks, MLOps pipeline security, OWASP Top 10 for LLMs, MITRE ATLAS, and NIST AI RMF.
- Experience with DLP, data classification, data access governance, DSPM, encryption, tokenization, key management, data privacy regulations, and cloud-based data platforms.
- Knowledge of networking, packet analysis, cryptography, IAM, SSO, SAML, federated identity, RBAC, OAuth/OIDC, and API/webhook development.
- Strong scripting and programming skills using Python, PowerShell, Bash, and Node.js.
- Experience with infrastructure-as-code security scanning tools such as Checkov, tfsec, and Prisma Cloud.
- Preferred qualifications include AI security or data security certifications or training such as CDAI, CompTIA AI+, CDPSE, or CIPP.
- Strong communication, leadership, research, analytical, problem-solving, relationship-building, workshop facilitation, and mentoring skills.
Benefits
- Full-time salaried position with a stated salary range of $103,200.00–$192,000.00.
- Health insurance, tuition reimbursement, accident and life insurance, retirement savings plans, and other perks and rewards.
- Training, coaching, manager support, and network-building opportunities.
- Inclusive, equitable, and accessible workplace with accommodations available upon request.
Categories
About BMO Financial Group
BMO Financial Group is a publicly traded North American bank offering personal and commercial banking, wealth management, and capital markets services to consumers, businesses, and institutions. Founded in 1817 and headquartered in Toronto, it operates in Canada and the United States, including BMO Bank N.A. in the U.S. The company is listed on the NYSE and TSX under the symbol BMO.