Senior Cloud Security Engineer

About the role

The Senior Cloud Security Engineer secures Invesco's cloud, SaaS, AI, and data ecosystems by implementing, operating and continuously improving security controls that reduce risk and strengthen cyber resilience.

Key responsibilities

• Conduct SaaS security assessments and reviews to ensure cloud and third‑party platforms meet security requirements.
• Implement data protection controls across cloud and SaaS platforms, including DLP, DSPM, encryption, access controls and governance integrations.
• Perform threat modeling and security design reviews for emerging technologies, cloud services and AI‑enabled solutions.
• Leverage automation and Infrastructure‑as‑Code to improve security control deployment, consistency and operational efficiency.
• Support security incident response, threat investigations and remediation activities within cloud and SaaS environments.
• Partner with Cyber Defense, IAM, Infrastructure and Application teams to continuously improve overall security posture and resilience.

Required profile

• 5+ years of cybersecurity, information security or security engineering experience supporting enterprise‑scale environments.
• 3+ years of focused cloud security engineering experience across AWS, Azure, Oracle Cloud and SaaS platforms.
• Hands‑on experience with Wiz, Falcon Shield SSPM, DSPM, CASB and DLP technologies.
• Strong understanding of attack‑path analysis, threat modeling, cloud identity security and privilege risk management.
• Experience securing AI capabilities, cloud‑native applications, containers and Kubernetes.
• Experience implementing data protection controls, including encryption, data classification and sensitive data governance.
• Proficiency with Terraform, automation, scripting and Infrastructure‑as‑Code practices.
• Knowledge of regulatory and security frameworks such as NIST, ISO 27001, CSA, SOC 1/2, GDPR, DORA and SOX.

Required skills

• AWS
• Azure
• Oracle Cloud
• SaaS platforms
• Wiz
• Falcon Shield SSPM
• DSPM
• CASB
• DLP
• Terraform
• Scripting
• Infrastructure‑as‑Code
• Kubernetes
• NIST
• ISO 27001
• CSA
• SOC 1/2
• GDPR
• DORA
• SOX

What we offer

• Hybrid working environment
• RRSP contributions
• Health & wellness benefits
• Work flexibility programs
• Parental leave benefits
• Study support