Cybersecurity Sr Engineer

About the Role

The mission of the individual in this role is to leverage a strong understanding of enterprise‑level knowledge and/or expert knowledge to mitigate cyber security risk. The role works with CBRE business units, Digital & Technology, and partner organizations (Compliance, Risk Management, Audit, & Legal) to integrate security processes, tools, and people into the business culture, providing a holistic security ecosystem, driving continuous improvements and seamless protection/monitoring capabilities globally. As a senior team member, the individual will lead complex initiatives, build a progressive development team, and champion an agile, iterative problem‑solving mindset. Experience in all listed skills is not required; relevant similar experience is welcomed.

Responsibilities

• Support and maintain secure solutions for GenAI, LLMs, agents, and MLOps platforms.
• Develop and implement guardrails, access controls, and prompt protection.
• Lead AI‑focused threat modeling and reduce model/system attack surface.
• Align controls with NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, MITRE ATLAS.
• Collaborate with red teams and support adversarial testing.
• Guide incident‑response playbooks for AI security events.
• Integrate with secrets managers and cloud‑native security platforms.
• Deploy security tooling and observability for AI behavior.
• Mentor teams and act as SME on AI risks and controls.
• Contribute to policy and governance for responsible AI use.
• Develop reporting that exhibits operational excellence and product performance metrics.
• Participate in on‑call rotation to ensure uptime and functionality of critical internal customer services.
• Provide well‑founded opinions and voice disagreements when security decisions do not pass a “smell test.”
• Mentor and coach team members to further develop competencies.
• Lead by example and model behaviors consistent with company values.
• Other duties as assigned.

Requirements

• Bachelor’s degree (BA/BS) in a related field, plus a minimum of 3 years related work experience; or an equivalent combination of education and experience (2 years of related experience for each year of higher education).
• Advanced experience administering security‑based tools related to CSPM/CNAPP, CIEM, and vulnerability scanners (OSA, SAST, DAST).
• Intermediate experience solutioning with cloud provider services such as OpenSearch, Azure OpenAI, AWS Bedrock.
• Intermediate experience with one or more additional cloud providers (GCP, Alibaba, Azure).
• Intermediate experience writing and running Terraform.
• Intermediate Linux systems administration experience or equivalent skills.
• Intermediate experience with DevOps or CI/CD pipelines (GitHub Actions, GitLab, Jenkins, etc.).
• Intermediate experience automating multiple systems using functional and object‑oriented programming languages.
• Intermediate experience with RDBMS and vector storage solutions.
• Intermediate understanding of source‑control management and practices using Git and GitHub.
• Advanced experience onboarding and integrating third‑party PaaS & SaaS solutions.
• Experience with Microsoft ecosystem directory services (AD, LDAP).
• Understanding and experience with backend software application development, including API development and integration with third‑party sources.
• Knowledge of system‑integration design patterns at scale, microservice design or development.
• Strong written and verbal communication skills; ability to explain complex cybersecurity concepts to technical and business stakeholders.
• Ability to document standards, author technical reports, and collaborate across engineering, operations, and compliance teams.
• Strong analytical and decision‑making skills; experience solving complex cybersecurity problems, evaluating competing technical solutions, applying risk‑based reasoning, and delivering strategies that improve enterprise security posture and operational resilience.
• Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.

Why CBRE

CBRE is the global leader in commercial real estate services and investment, helping businesses and people thrive. The company values dynamic problem solvers, forward‑thinking professionals, and a collaborative culture built on respect, integrity, service, and excellence. CBRE welcomes diverse perspectives, backgrounds, and skillsets, offering employees the opportunity to chart their own course and realize their potential.