Senior Cloud Security Engineer

As one of the world’s leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco.

Your Role The Senior Cloud Security Engineer is responsible for securing Invesco's cloud, SaaS, AI, and data ecosystems through the implementation, operation, and continuous improvement of security controls that reduce organizational risk and strengthen cyber resilience. This role partners with engineering, architecture, infrastructure, application, and cybersecurity teams to identify and reduce attack paths, protect critical assets, improve security posture, and ensure cloud technologies are implemented in accordance with enterprise security standards. You Will Be Responsible For  ber events.  Conducting SaaS security assessments and security reviews to ensure cloud and third-party platforms meet Invesco security requirements.  Implementing data protection controls across cloud and SaaS platforms, including DLP, DSPM, encryption, access controls, and data governance integrations.  Performing threat modeling and security design reviews for emerging technologies, cloud services, and AI-enabled solutions.  Leveraging automation and Infrastructure-as-Code to improve security control deployment, consistency, and operational efficiency.  Supporting security incident response, threat investigations, and remediation activities within cloud and SaaS environments.  Partnering with Cyber Defense, IAM, Infrastructure, and Application teams to continuously improve overall security posture and resilience.  The Experience you Bring: 5+ years of cybersecurity, information security, or security engineering experience supporting enterprise-scale environments.  3+ years of focused cloud security engineering experience across AWS, Azure, Oracle Cloud, and SaaS platforms.  Experience implementing cloud security posture management, SaaS security posture management, and cloud-native security controls.  Hands-on experience with Wiz, Falcon Shield SSPM, DSPM, CASB, DLP, and cloud security technologies.  Strong understanding of attack path analysis, threat modeling, cloud identity security, privilege risk management, and containment strategies.  Experience securing AI capabilities, cloud-native applications, containers, Kubernetes, and modern application architectures.  Experience implementing data protection controls, including DLP, DSPM, encryption, data classification, and sensitive data governance.  Experience with Terraform, automation, scripting, and Infrastructure-as-Code practices.  Experience supporting regulatory and security frameworks including NIST, ISO 27001, CSA, SOC1/2, GDPR, DORA, and SOX.  Strong communication skills with the ability to translate technical risks into business-focused outcomes. \Reduce exposure to cloud, SaaS, AI, and data-related threats.  Identify and remediate attack paths before they can be exploited.  Protect critical business services, sensitive data, and privileged identities from modern attack scenarios.  Improve the organization's ability to detect, contain, and recover from cyber events.  Enable secure business growth through cloud, SaaS, and AI adoption.  The salary range for this position in PEI is $90,000-100,000 CAD per year. The total compensation offered for this position includes salary and incentive pay and will vary based on skills, experience and location Full Time / Part Time Full time Worker Type Employee Job Exempt (Yes / No) No Workplace Model Pursuant to Invesco’s Workplace Policy, employees are expected to comply with the firm’s most current workplace model, which as of October 1, 2025,