The opportunity

Manulife is looking for hands-on Senior Cloud Security Engineer with a passion for Cloud Security, Application Security, and DevSecOps. The senior engineer will be reporting to Principal engineer. The ideal applicant will produce an autonomous policy driven security strategy to build security into our cloud services, from design, through implementation to release, and will have deep technical expertise in security technologies, along with a demonstrable understanding of information security and networking.

This hands-on role will focus on designing security features and hardening processes for cloud environments and container-based applications. This job involves identifying integration and cybersecurity issues, proposing solutions to optimize data and infrastructure protection against internal and external threats.

Responsibilities

• Assess, design, implement, automate, and document security solutions, controls, and processes for MS Azure and Amazon Web Service (AWS) cloud platforms.

• Develop and maintain Security patterns for Cloud Platforms and Services; Assess all cloud patterns to ensure consistency with recommended security practices and controls.

• Hands-on knowledge on Cloud Security configuration, Policy as a Code, Knowledge on Pipelines and integrating security policies.

• Offer domain expertise on architecture, authentication, and systems security derived from an in-depth understanding of our cloud engineering stack, services, and data flow.

• Demonstrable experience performing continuous cybersecurity risk assessments of new and existing technologies to identify risks and establish appropriate controls that balance security and operability.

• Planning, testing, and implementing security solutions for the monitoring and protection of company assets and applications in the cloud.

• Deployment, management, and optimization of cloud and container security tools such as Prisma Cloud, Azure Defender, Qualys etc.

How will you create an impact?

In this role, you will have the opportunity to work with a dynamic and collaborative team, and to make a significant impact on the delivery of technology services to our global organization.

The Senior Cloud Security Engineer should have extensive experience in crafting our global Cyber Security Program, aligning it with information security policy and leading industry standards. They will apply proven practices and methodologies.

What motivates you?

• You obsess about customers, listen, engage and act for their benefit.

• You think big, with curiosity to discover ways to use your agile approach and enable business outcomes.

• You thrive in teams and enjoy getting things done together.

• You take ownership and build solutions, focusing on what matters.

• You do what is right, work with integrity and speak up.

• You share your humanity, helping us build a diverse and inclusive work environment for everyone.

What we are looking for

• Bachelor’s degree in information technology, Computer Science or equivalent required

• 5 to 7 years of IT Security and/or security engineering experience, with a focus on Cloud Security Posture Management (CSPM), Infrastructure as a Code (IaC) and Cloud technologies.

• Proficiency in a scripting language such as Python, Json and Terraform

• Experience with selecting, designing, and implementing security tools and capabilities for large, complex commercial organizations with focus on cloud security.

• Understanding of compliance frameworks, like PCI, ISO 27001, NIST, FedRAMP, MITRE.

• Strong written and presentation skills with the ability to communicate effectively with diverse technical and non-technical groups, spanning all organizational levels.

• Must be able to work in a fast paced and changing environment while handling multiple tasks, priorities, and directives. Capable of working under pressure.

• Experience maintaining information security competency through ongoing professional development and staying abreast of emerging technologies, risks and controls in information and cyber security.

• Experience collaborating with audit L3 teams globally to allow definition of effective assessments on information and cyber security risk management.

• Experience working closely with Information Security, product, and software development teams to assess cybersecurity risk, cloud controls, and recommend solution and remediation in the cloud environment.

• The following certifications are nice to have: CISSP, OSCP, OSCE, GIAC Web Application Penetration Tester (GWAPT), CEH, CompTIA Security What can we offer you?

• A competitive salary and benefits packages.

• A growth trajectory that extends upward and outward, encouraging you to follow your passions and learn new skills.

• A focus on growing your career path with us.

• Flexible work policies and strong work-life balance.

• Professional development and leadership opportunities.

Our commitment to you

• Values-first culture

• We lead with our Values every day and bring them to life together.

• Boundless opportunity

• We create opportunities to learn and grow at every stage of your career.

• Continuous innovation

• We invite you to help redefine the future of financial services.

• Delivering the promise of Diversity, Equity and Inclusion

• We foster an inclusive workplace where everyone thrives.

• Championing Corporate Citizenship

• We build a business that benefits all stakeholders and has a positive social and environmental impact.

Tentang Manulife dan John Hancock

Manulife Financial Corporation adalah penyedia layanan keuangan internasional yang membantu memudahkan keputusan dan membuat hidup lebih baik bagi nasabah. Untuk mempelajari lebih lanjut tentang kami, kunjungi https://www.manulife.co.id .

Manulife adalah Perusahaan dengan Kesetaraan Kesempatan Kerja

Di Manulife/John Hancock, kita merayakan keragaman. Kita berusaha menarik, mengembangkan, dan mempertahankan tenaga kerja yang sama beragamnya dengan nasabah yang kita layani dan untuk mengembangkan lingkungan kerja inklusif yang menerima kekuatan budaya dan individu. Kita berkomitmen untuk melaksanakan rekrutmen, retensi, peningkatan, dan kompensasi secara adil, dan kita mengatur semua praktik dan program tanpa adanya diskriminasi. Baik itu diskriminasi karena ras, keturunan, tempat asal, warna kulit, asal etnis, kewarganegaraan, agama atau keyakinan agama, kepercayaan, jenis kelamin (termasuk kehamilan dan kondisi terkait kehamilan), orientasi seksual, karakteristik genetika, status veteran, identitas gender, ekspresi gender, usia, status pernikahan, status keluarga, disabilitas, maupun alasan lain yang dilindungi oleh hukum yang berlaku.

Menyediakan akses hubungan kerja yang adil merupakan prioritas utama kita. Seorang perwakilan Human Resources akan bekerja dengan pelamar yang meminta akomodasi yang wajar selama proses lamaran kerja. Seluruh informasi yang dibagikan selama proses permohonan akomodasi akan disimpan dan digunakan dengan cara yang sesuai dengan hukum dan kebijakan Manulife/John Hancock yang berlaku. Untuk meminta akomodasi yang wajar dalam proses lamaran kerja, silakan hubungi recruitment@manulife.com .

Primary Location

Toronto, Ontario

Working Arrangement

Kombinasi

Salary range is expected to be between

$94,220.00 CAD - $174,980.00 CAD

If you are applying for this role outside of the primary location, please contact recruitment@manulife.com for the salary range for your location. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance.

Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact recruitment@manulife.com for more information about U.S.-specific paid time off provisions.