Senior Cloud Security Engineer

Invesco; Charlottetown; Hybrid; CAD 90,000 - 100,000; Full time

Benefits offered by this job

Hybrid working environment

RRSP Contributions

Health & Wellness Benefits

Work flexibility Programs

Parental Leave Benefits

Study Support

Job summary

Invesco, a global investment firm, is seeking a Senior Cloud Security Engineer in Charlottetown, PEI. The role secures Invesco's cloud, SaaS, AI, and data ecosystems by implementing and operating security controls in line with enterprise standards.

You will collaborate with engineering, architecture, infrastructure, application, and cybersecurity teams to reduce attack paths, protect assets, and strengthen cyber resilience while enabling secure business growth through cloud, SaaS, and AI

Qualifications

• 5+ years in cybersecurity or security engineering for enterprise-scale environments.
• 3+ years in cloud security across AWS, Azure, Oracle Cloud, and SaaS.
• Experience with cloud security posture management and cloud-native security controls.
• Hands-on with Wiz, Falcon Shield SSPM, DSPM, CASB, DLP.
• Knowledge of threat modeling, attack paths, and identity security.
• Experience securing AI capabilities, containers, Kubernetes.
• Proficient in Terraform and IaC scripting.
• Familiarity with NIST, ISO 27001, CSA, SOC2, GDPR, DORA, SOX.
• Strong communication to translate risk to business outcomes.

Responsibilities

• Secure Invesco cloud, SaaS, AI, and data ecosystems by implementing and operating security controls.
• Perform SaaS security assessments and security reviews to ensure cloud and third-party platforms meet security requirements.
• Implement data protection controls across cloud and SaaS platforms, including DLP, DSPM, encryption, access controls, and data governance integrations.
• Perform threat modeling and security design reviews for emerging technologies, cloud services, and AI-enabled solutions.
• Leverage automation and Infrastructure-as-Code to improve security control deployment, consistency, and operational efficiency.
• Support security incident response, threat investigations, and remediation activities within cloud and SaaS environments.
• Partner with Cyber Defense, IAM, Infrastructure, and Application teams to improve overall security posture and resilience.

Skills

Cybersecurity experience

Cloud security engineering

Threat modelling

Attack path analysis

Identity security

Privilege risk management

Containment strategies

AI security

Cloud-native apps

Containers

Kubernetes

Data protection

Data classification

Data governance

Infrastructure as Code

Scripting

Automation

Compliance frameworks

Communication

Threat remediation

Incident response

Cloud adoption security

Tools

Wiz

Falcon Shield SSPM

DSPM

CASB

DLP

Terraform

Job description

As one of the world’s leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco.

Job Description

Your Role

The Senior Cloud Security Engineer is responsible for securing Invesco's cloud, SaaS, AI, and data ecosystems through the implementation, operation, and continuous improvement of security controls that reduce organizational risk and strengthen cyber resilience. This role partners with engineering, architecture, infrastructure, application, and cybersecurity teams to identify and reduce attack paths, protect critical assets, improve security posture, and ensure cloud technologies are implemented in accordance with enterprise security standards.

You Will Be Responsible For

• ber events.
• Conducting SaaS security assessments and security reviews to ensure cloud and third-party platforms meet Invesco security requirements.
• Implementing data protection controls across cloud and SaaS platforms, including DLP, DSPM, encryption, access controls, and data governance integrations.
• Performing threat modeling and security design reviews for emerging technologies, cloud services, and AI-enabled solutions.
• Leveraging automation and Infrastructure-as-Code to improve security control deployment, consistency, and operational efficiency.
• Supporting security incident response, threat investigations, and remediation activities within cloud and SaaS environments.
• Partnering with Cyber Defense, IAM, Infrastructure, and Application teams to continuously improve overall security posture and resilience.

The Experience you Bring:

• 5+ years of cybersecurity, information security, or security engineering experience supporting enterprise-scale environments.
• 3+ years of focused cloud security engineering experience across AWS, Azure, Oracle Cloud, and SaaS platforms.
• Experience implementing cloud security posture management, SaaS security posture management, and cloud-native security controls.
• Hands-on experience with Wiz, Falcon Shield SSPM, DSPM, CASB, DLP, and cloud security technologies.
• Strong understanding of attack path analysis, threat modeling, cloud identity security, privilege risk management, and containment strategies.
• Experience securing AI capabilities, cloud-native applications, containers, Kubernetes, and modern application architectures.
• Experience implementing data protection controls, including DLP, DSPM, encryption, data classification, and sensitive data governance.
• Experience with Terraform, automation, scripting, and Infrastructure-as-Code practices.
• Experience supporting regulatory and security frameworks including NIST, ISO 27001, CSA, SOC1/2, GDPR, DORA, and SOX.
• Strong communication skills with the ability to translate technical risks into business-focused outcomes. \Reduce exposure to cloud, SaaS, AI, and data-related threats.
• Identify and remediate attack paths before they can be exploited.
• Protect critical business services, sensitive data, and privileged identities from modern attack scenarios.
• Improve the organization's ability to detect, contain, and recover from cyber events.
• Enable secure business growth through cloud, SaaS, and AI adoption.

The salary range for this position in PEI is $90,000-100,000 CAD per year. The total compensation offered for this position includes salary and incentive pay and will vary based on skills, experience and location

Full Time / Part Time

Full time

Worker Type

Employee

Job Exempt (Yes / No)

No

Workplace Model

Pursuant to Invesco’s Workplace Policy, employees are expected to comply with the firm’s most current workplace model, which as of October 1, 2025, includes spending at least four full days each week working in an Invesco office. This reflects our belief that spending time together in the office helps us build stronger relationships, collaborate more easily, and support each other’s growth and development.

What’s in it for you?

• Hybrid working environment
• RRSP Contributions
• Health & Wellness Benefits
• Work flexibility Programs
• Parental Leave Benefits
• Study Support

The above information on this description has been designed to indicate the general nature and level of work performed by employees within this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. The job holder may be required to perform other duties as deemed appropriate by their manager from time to time.

Invesco is committed to fair and accessible employment practices. If selected for an interview, we will work with you to ensure that your interview is accessible and accommodation is provided. Please contact us at [e-mail] or 1.800.874.6275 to let us know if you require accommodation for an interview due to a disability.