Remote Staff Security Engineer, Cloud & AI Platform

Brookfield Properties; Northern (KY); Hybrid; USD 180,000 - 230,000; Full time

Benefits offered by this job

401K matching

tuition reimbursement

summer Fridays

paid maternity leave

employee referral program

Job summary

Brookfield Properties is seeking a Staff Security Engineer for Cloud & AI Platform. You will shape security architecture across AWS, IaC, and AI systems, building reusable controls and secure-by-default patterns that scale with the business.

You will partner with Cloud Solutions, application and AI engineering, Identity, CyberOps and GRC/Privacy to implement practical security that minimizes friction and accelerates delivery while protecting data and workloads.

Qualifications

• 8+ years of senior or staff-level ownership of production security or platform systems.
• Deep AWS security experience across IAM, multi-account environments, logging, and KMS.
• Strong Terraform or OpenTofu skills with modular design and policy controls.
• Experience securing CI/CD systems such as GitHub Actions, including OIDC federation and secrets.
• Knowledge of application security fundamentals: threat modeling, authentication, and vulnerabilities.
• Ability to read/write production automation code in Python, Go, or Ruby.
• Ability to influence teams and turn security needs into implemented controls.
• Nice to have experience with Bedrock/AgentCore/LLM gateways or AI guardrails.
• Container security for ECS/EKS, image supply chains, and runtime isolation.
• Identity platforms: IAM Identity Center, Okta, SAML, OIDC, OAuth, SCIM, ABAC.
• Experience with remote IaC platforms (Terraform Cloud, Scalr).
• Familiarity with CrowdStrike, Datadog, CloudWatch for security/observability.
• Data security for S3, Snowflake, PostgreSQL/Aurora.
• AI threat modeling or red-teaming experience.

Responsibilities

• Define security architecture for cloud and AI platforms; set direction and secure-by-default patterns.
• Review designs for authorization, data protection, secrets, and tenancy risks.
• Build reusable security controls in Terraform/OpenTofu with safe rollout and testing.
• Strengthen centralized logging and evidence via CloudTrail, Config, GuardDuty, CloudWatch.
• Establish secure GitHub Actions patterns, OIDC, environment separation, and least-privilege deployment roles.
• Lead threat modeling and security design reviews for web apps, APIs, and AI systems.
• Translate telemetry into detections, runbooks, ownership, and escalation paths.

Skills

Senior / Staff-level ownership

AWS security expertise

Application security fundamentals

Automation coding (Python/Go/Ruby)

Influence cross-functional teams

AI security / threat modeling

Data protection controls

CI/CD security (GitHub Actions)

Identity & access management knowledge

Tools

Terraform

OpenTofu

GitHub Actions

Terraform Cloud

CrowdStrike Falcon Cloud Security

Datadog

CloudWatch

Job description

Brookfield Properties is seeking a Staff Security Engineer for Cloud & AI Platform. You will shape security architecture across AWS, IaC, and AI systems, building reusable controls and secure-by-default patterns that scale with the business.

You will partner with Cloud Solutions, application and AI engineering, Identity, CyberOps and GRC/Privacy to implement practical security that minimizes friction and accelerates delivery while protecting data and workloads.