Senior AI Cloud Security Engineer

A Senior AI Cloud Security Engineer is responsible for building, automating, and enforcing security controls across cloud infrastructure and AI platforms. This role focuses on engineering secure‑by‑default systems, integrating security into development workflows, and protecting enterprise AI initiatives. Work location: Toronto, Canada or Boston, USA Work arrangement: Hybrid – 3 days in office, 2 days from home. Remote working option is not available. Position Responsibilities Design, implement, and automate security controls across cloud and AI environments, ensuring secure‑by‑default architecture, continuous compliance, and protection against evolving threats. Implement and operate AI Security Posture Management (AISPM) solutions to continuously assess, detect, and remediate risks across AI and cloud environments. Secure AI and Generative AI workloads, including model pipelines, training data, inference APIs, and LLM integrations against threats such as prompt injection, data leakage, model abuse, and adversarial attacks. Design and implement AISPM controls to provide visibility into AI assets, monitor model usage and access patterns, enforce security guardrails, and manage AI risks across the lifecycle. Embed security into CI/CD and MLOps pipelines (DevSecOps) using automated controls such as SAST/DAST, IaC scanning, secrets detection, and compliance enforcement gates. Develop and maintain security policies and policy‑as‑code frameworks (e.g., Azure Policy) to enforce governance, regulatory compliance, and responsible AI usage. Engineer monitoring, detection, and response capabilities for cloud and AI systems, integrating telemetry with SIEM/SOAR platforms for centralized visibility and automated response. Perform security testing and validation across cloud, application, API, and AI layers, including AI‑specific scenarios such as prompt injection and model misuse prior to production deployment. Automate security operations through scripting and tooling (Python, PowerShell) to improve efficiency, scalability, and consistency of controls. Conduct risk assessments, threat modeling, and security reviews for cloud infrastructure and AI systems to identify vulnerabilities and implement mitigation strategies. Collaborate with AI teams and security stakeholders to drive secure‑by‑design architectures and enable scalable, governed AI adoption. Triage and analyze findings from security tools including AISPM platforms, IaC scanners, CSPM, and vulnerability management tools, ensuring timely prioritization and remediation. Research and stay current on emerging security standards, AI security trends, threat vectors, and vulnerabilities, including risks specific to Generative AI, LLMs, and ML systems. Hands‑on experience with AI security tools and understanding of LLM and AI‑specific threats. Develop, document, and disseminate security guidelines, remediation playbooks, and hardened baselines for both cloud and AI systems. Collaborate with Penetration Testing teams to perform security assessments across cloud platforms and AI systems, including adversarial testing, prompt injection simulations, and AI misuse scenarios. Partner with SOC and Incident Response teams to ensure effectiveness of preventive, detective, and responsive controls for cloud and AI environments. Implement and tune monitoring and detection controls for cloud infrastructure and AI systems, supporting response to AI‑related threats such as model abuse or data leakage. Build and maintain automation to streamline security tasks, testing, validation workflows, and remediation processes across cloud and AI pipelines. Configure, integrate, and maintain security tools and technologies for AISPM solutions and model/agent security solutions, ensuring comprehensive coverage across cloud and AI workloads. Continuously evaluate and recommend proactive security improvements based on evolving cloud and AI threat landscapes, including enhancements to AI governance and security posture. Provide guidance to engineering and AI teams on secure AI development practices, responsible AI usage, and compliance with AI governance frameworks. Required Qualifications Minimum 7–8 years of IT industry experience. Minimum 5+ years of experience in cloud and security engineering, with strong hands‑on expertise in Azure or a similar cloud platform. Experience in AI security and AISPM, including securing AI and Generative AI systems and managing risks such as prompt injection, data leakage, and model abuse. Proven experience with CSPM, CWP, IaC, and implementing secure cloud architectures. Strong understanding of DevSecOps practices, including CI/CD security, SAST/DAST, IaC scanning, and automation (Python/PowerShell). Experience developing and enforcing security policies and policy‑as‑code frameworks aligned with standards such as NIST, ISO, and CIS. Knowledge of security monitoring, SIEM/SOAR, and incident response for cloud and AI environments. Experience with security testing, threat modeling, and risk assessments. Strong collaboration and communication skills, with the ability to work across cloud, AI, and security teams. Preferred Qualifications Bachelor’s degree in Computer Science, Software Engineering, or a related field. Skills Cloud Security AI Posture Management AI Runtime Security AI Model Security AI Agent Security Cloud Configuration Management Risk Management Security Monitoring Security Frameworks Encryption Techniques Network Security Regulatory Compliance Benefits Comprehensive benefits package in health, dental, mental health, vision, short‑ and long‑term disability, life insurance, accidental death and dismemberment, adoption/substitution, wellness, and employee/family assistance. Retirement savings plans, including pension plans and a worldwide equity ownership plan with comparable employer contributions. Paid time off: holidays, vacation, personal days, sick days, and statutory time off. Competitive salary ranges: Toronto – Canada: CAD113,000.00 to CAD163,000.00. Boston – USA: USD107,450 to USD153,500. EEO Statement Manulife is an equal‑opportunity employer. We are committed to hiring, retaining, and promoting a diverse workforce. We do not discriminate on race, ancestry, place of birth, color, ethnicity, citizenship, religion, gender, sexual orientation, genetic attributes, veteran status, gender identity, sexual function, age, marital status, family status, disability, or any other legally protected status. #J-18808-Ljbffr Manulife