Remote Staff Security Engineer, Cloud & AI Platform

GGP; United States; Remote; USD 190,000 - 230,000; Full time

Job summary

Brookfield is seeking a Staff Security Engineer to design security by design across AWS, IaC, software delivery, and AI agents. This is a hands-on builder role focusing on threat modeling, code reviews, security controls, and reusable protections.

You will partner with Cloud Solutions, AI engineering, Identity, CyberOps, and GRC to implement secure patterns, guardrails, logging, and incident response. The role emphasizes architecture and assurance over documentation.

Qualifications

• 8+ years of experience in production security or platform systems.
• Ability to influence teams and make pragmatic risk decisions.
• Deep AWS security experience across IAM, multi-account environments, logging, KMS, networking.
• Strong Terraform or OpenTofu skills with modular design and policy controls.
• Experience securing CI/CD systems such as GitHub Actions, including OIDC federation and secrets.
• Read/write automation or application code in Python, Go, Ruby.
• Knowledge of threat modeling, authentication, authorization, and secure API design.

Responsibilities

• Define security architecture for cloud and AI platforms; set direction and secure-by-default patterns.
• Review designs for authorization, data protection, secrets, and tenant isolation.
• Build reusable security controls in Terraform or OpenTofu and automate rollout.
• Strengthen centralized logging and evidence; manage guardrails as environment grows.
• Lead threat modeling and security design reviews for web apps, APIs, data ingestion, and agentic systems.
• Translate telemetry into detections, runbooks, and escalation paths with CyberOps.
• Lead technical response for cloud, identity, software supply chain, and AI security incidents.

Skills

Security architecture

Terraform/OpenTofu

GitHub Actions security

Python/Go/Ruby

Threat modeling

Cross-team influence

Risk decision making

Automation coding

Tools

Terraform

OpenTofu

GitHub Actions

OIDC federation

SAST/DAST tooling

Job description

Brookfield is seeking a Staff Security Engineer to design security by design across AWS, IaC, software delivery, and AI agents. This is a hands-on builder role focusing on threat modeling, code reviews, security controls, and reusable protections.

You will partner with Cloud Solutions, AI engineering, Identity, CyberOps, and GRC to implement secure patterns, guardrails, logging, and incident response. The role emphasizes architecture and assurance over documentation.