Remote Staff Cloud & AI Security Engineer

Brookfield Properties; United States; Remote; USD 150,000 - 210,000; Full time

Job summary

Brookfield Properties is seeking a Staff Security Engineer for Cloud & AI Platform. You will lead security architecture and implementation across AWS, IaC, and AI systems, threat-modeling designs, reviewing Terraform and application code, and building reusable, secure-by-default controls.

You will collaborate with Cloud Solutions, AI engineering, Identity, CyberOps, and GRC to drive secure adoption. You will own architecture, controls, tooling, and assurance mechanisms, ensuring platform

Qualifications

• 8+ years experience in security or platform systems.
• Senior or Staff-level ownership of security or platform architecture.
• Deep AWS security across IAM, multi-account, logging, and KMS.
• Strong Terraform or OpenTofu skills and secure-by-default patterns.
• Experience securing CI/CD systems including GitHub Actions and OIDC.
• Knowledge of threat modeling, authentication/authorization, and secure API design.
• Ability to read/write production automation or application code (Python/Go).
• Proven ability to influence teams and implement pragmatic security controls.

Responsibilities

• Define cloud and AI platform security architecture and standards.
• Review designs for authorization, data protection, secrets, and tenancy risks.
• Build reusable security controls in Terraform/OpenTofu with safe rollout.
• Strengthen centralized logging and evidence; update guardrails as env grows.
• Lead threat modeling and security reviews for web apps, APIs, and agent systems.
• Establish secure patterns for Bedrock and model platforms; ensure guardrails.
• Lead secure GitHub Actions patterns, including OIDC trust and least-privilege roles.
• Translate telemetry into detections, runbooks, ownership, and escalation paths.

Skills

AWS security

Terraform

OpenTofu

GitHub Actions

Threat modeling

Security architecture

CI/CD security

Python/Go

Cross-team influence

Tools

Okta

Terraform Cloud

ECS/EKS

Datadog

Job description

Brookfield Properties is seeking a Staff Security Engineer for Cloud & AI Platform. You will lead security architecture and implementation across AWS, IaC, and AI systems, threat-modeling designs, reviewing Terraform and application code, and building reusable, secure-by-default controls.

You will collaborate with Cloud Solutions, AI engineering, Identity, CyberOps, and GRC to drive secure adoption. You will own architecture, controls, tooling, and assurance mechanisms, ensuring platform