Cybersecurity Sr Engineer

CBRE Group, Inc.; Richardson (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

CBRE Group, Inc. seeks a senior cybersecurity professional to mitigate AI/ML risk across enterprise systems. You will partner with Compliance, Risk Management, Audit, Legal, and Digital & Technology to integrate security processes and tools globally.

You will guide threat modeling, incident playbooks, and governance for responsible AI use while mentoring teams and driving continuous improvement. The role emphasizes collaboration with red teams, cloud-native security, and model protection, with

Qualifications

• Bachelor's degree in a related field and 3+ years of experience or equivalent
• Advanced experience administering security tools related to CSPM/CNAPP, CIEM, Vulnerability Scanners (OSA, SAST, DAST)
• Intermediate experience with cloud services including OpenSearch, Azure OpenAI, AWS Bedrock
• Experience with Terraform
• Experience with Linux systems administration
• Experience with CI/CD pipelines
• Experience with programming for system automation
• Experience with RDBMS and Vector storage
• Understanding of Git/GitHub workflows
• Onboarding/integrating to third‑party PaaS & SaaS
• Experience with Microsoft ecosystem services
• Directory services like AD and LDAP
• API development and integrating with third party sources
• Microservice design/development experience
• Strong written and verbal communication across technical and business stakeholders
• Strong analytical and risk-based decision making

Responsibilities

• Support and maintain secure solutions for GenAI, LLMs, agents, and MLOps platforms
• Develop and implement guardrails, access controls, and prompt protection
• Lead AI-focused threat modeling and reduce model/system attack surface
• Align controls with NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, MITRE ATLAS
• Collaborate with red teams and support adversarial testing
• Guide incident response playbooks for AI security events
• Integrate with secrets managers and cloud-native security platforms
• Deploy security tooling and observability for AI behavior
• Mentor teams and act as SME on AI risks and controls
• Contribute to policy and governance for responsible AI use
• Develop reporting exhibiting operational excellence and product performance metrics
• On-call rotation for uptime of critical internal services
• Mentor and coach team members to develop competencies
• Lead by example and model CBRE values

Skills

Security strategy

Threat modeling

Risk assessment

Cybersecurity governance

Communication

Collaborative work

Agile mindset

Education

Bachelor's degree (BA/BS) in related field

Tools

CSPM/CNAPP

CIEM

Vulnerability Scanners (OSA, SAST, DAST)

OpenSearch

Azure OpenAI

AWS Bedrock

DevOps pipelines (GitHub Actions, GitLab, Jenkins)

Job description

About the role

The mission of the individual in this role is to leverage their strong understanding of enterprise-level knowledge and/or expert knowledge to mitigate cyber security risk. They will actively work with the CBRE business, Digital & Technology and other partner organizations (Compliance, Risk Mgmt., Audit, & Legal) to seamlessly integrate security processes, tools, and people into the business culture providing a holistic security ecosystem, driving continuous improvements and seamless protection / monitoring capabilities globally. Leads and executes on complex initiatives that drive problem resolution. As a senior member on the team, this individual will work to build a progressive development team with a mindset toward being agile and solving problems iteratively. Experience in all skills listed is not necessary to be qualified for the position. If you have relevant similar experience, we still want to talk to you.

What you'll do

• Support and maintain secure solutions for GenAI, LLMs, agents, and MLOps platforms
• Develop and implement guardrails, access controls, and prompt protection
• Lead AI-focused threat modeling and reduce model/system attack surface
• Align controls with NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, MITRE ATLAS
• Collaborate with red teams and support adversarial testing
• Guide incident response playbooks for AI security events
• Integrate with secrets managers and cloud-native security platforms
• Deploy security tooling and observability for AI behavior
• Mentor teams and act as SME on AI risks and controls
• Contribute to policy and governance for responsible AI use
• Develop reporting exhibiting operational excellence and product performance metrics
• On-call rotation for ensuring uptime, and functionality of critical internal customer services
• Have well founded opinions and be willing to express your disagreement when something doesn't pass the ‘smell test’ for you.
• Other duties as assigned
• Mentors and coaches team members to further develop competencies. Leads by example and models behaviors that are consistent with the company's values.

What you need

• Bachelor's degree (BA/BS) in a related field of work; plus a minimum of 3 years related work experience; or equivalent combination of education and experience (equivalent work experience = 2 years of related experience for every year of higher level education).
• Advanced experience administering security-based tools related to CSPM/CNAPP, CIEM, Vulnerability Scanners (OSA, SAST, DAST)
• Intermediate experience solutioning with cloud provider services such as OpenSearch, Azure OpenAI, AWS Bedrock
• Intermediate experience solutioning and working with one or more other cloud providers aside from AWS such as GCP, Alibaba, Azure
• Intermediate experience writing, and running Terraform
• Intermediate Linux systems administrator experience or equivalent skills
• Intermediate experience or equivalent skills with DevOps or CICD pipelines (GitHub Actions, GitLab, Jenkins, etc…)
• Intermediate experience with automating multiple systems using functional and object‑oriented programming languages
• Intermediate experience with RDBMS and Vector storage solutions
• Intermediate understanding of source control management and practices using Git, and Github
• Advanced experience with onboarding and integrating to third‑party PaaS & SaaS
• Experience with the Microsoft ecosystem
• Directory services like AD, and LDAP
• Understanding and experience with backend software application development, including API development, and integrating with third party sources
• Understanding of system integration design patterns at scale with experience in microservice design or development
• Strong written and verbal communication skills with the ability to explain complex cybersecurity concepts clearly across technical and business stakeholders. Able to document standards, author technical reports, and collaborate effectively across engineering, operations, and compliance teams.
• Strong analytical and decision‑making skills with experience solving complex cybersecurity problems. Able to evaluate competing technical solutions, apply risk‑based reasoning, and deliver strategies that improve enterprise security posture and operational resilience.

Why CBRE

When you join CBRE, you become part of the global leader in commercial real estate services and investment that helps businesses and people thrive. We are dynamic problem solvers and forward-thinking professionals who create significant impact. Our collaborative culture is built on our shared values — respect, integrity, service and excellence — and we value the diverse perspectives, backgrounds and skillsets of our people. At CBRE, you have the opportunity to chart your own course and realize your potential. We welcome all applicants.

Our Values in Hiring

At CBRE, we are committed to fostering a culture where everyone feels they belong. We value diverse perspectives and experiences, and we welcome all applications.

Disclaimers

Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.

Applicant AI Use Disclosure

We value human interaction to understand each candidate's unique experience, skills and aspirations. We do not use artificial intelligence (AI) tools to make hiring decisions, and we ask that candidates disclose any use of AI in the application and interview process.

About CBRE Group, Inc.

CBRE Group, Inc. (NYSE:CBRE), a Fortune 500 and S&P 500 company headquartered in Dallas, is the world’s largest commercial real estate services and investment firm (based on 2024 revenue). The company has more than 140,000 employees (including Turner & Townsend employees) serving clients in more than 100 countries. CBRE serves clients through four business segments: Advisory (leasing, sales, debt origination, mortgage serving, valuations); Building Operations & Experience (facilities management, property management, flex space & experience); Project Management (program management, project management, cost consulting); Real Estate Investments (investment management, development). Please visit our website at www.cbre.com.