The opportunity

Manulife is looking for hands-on Senior Cloud Security Engineer with a passion for Cloud Security, Application Security, and DevSecOps. The senior engineer will be reporting to Principal engineer. The ideal applicant will produce an autonomous policy driven security strategy to build security into our cloud services, from design, through implementation to release, and will have deep technical expertise in security technologies, along with a demonstrable understanding of information security and networking.

This hands-on role will focus on designing security features and hardening processes for cloud environments and container-based applications. This job involves identifying integration and cybersecurity issues, proposing solutions to optimize data and infrastructure protection against internal and external threats.

Responsibilities

• Assess, design, implement, automate, and document security solutions, controls, and processes for MS Azure and Amazon Web Service (AWS) cloud platforms.
• Develop and maintain Security patterns for Cloud Platforms and Services; Assess all cloud patterns to ensure consistency with recommended security practices and controls.
• Hands-on knowledge on Cloud Security configuration, Policy as a Code, Knowledge on Pipelines and integrating security policies.
• Offer domain expertise on architecture, authentication, and systems security derived from an in-depth understanding of our cloud engineering stack, services, and data flow.
• Demonstrable experience performing continuous cybersecurity risk assessments of new and existing technologies to identify risks and establish appropriate controls that balance security and operability.
• Planning, testing, and implementing security solutions for the monitoring and protection of company assets and applications in the cloud.
• Deployment, management, and optimization of cloud and container security tools such as Prisma Cloud, Azure Defender, Qualys etc.

How will you create an impact?

In this role, you will have the opportunity to work with a dynamic and collaborative team, and to make a significant impact on the delivery of technology services to our global organization.

The Senior Cloud Security Engineer should have extensive experience in crafting our global Cyber Security Program, aligning it with information security policy and leading industry standards. They will apply proven practices and methodologies.

What motivates you?

• You obsess about customers, listen, engage and act for their benefit.
• You think big, with curiosity to discover ways to use your agile approach and enable business outcomes.
• You thrive in teams and enjoy getting things done together.
• You take ownership and build solutions, focusing on what matters.
• You do what is right, work with integrity and speak up.
• You share your humanity, helping us build a diverse and inclusive work environment for everyone.

What we are looking for

• Bachelor’s degree in information technology, Computer Science or equivalent required
• 5 to 7 years of IT Security and/or security engineering experience, with a focus on Cloud Security Posture Management (CSPM), Infrastructure as a Code (IaC) and Cloud technologies.
• Proficiency in a scripting language such as Python, Json and Terraform
• Experience with selecting, designing, and implementing security tools and capabilities for large, complex commercial organizations with focus on cloud security.
• Understanding of compliance frameworks, like PCI, ISO 27001, NIST, FedRAMP, MITRE.
• Strong written and presentation skills with the ability to communicate effectively with diverse technical and non-technical groups, spanning all organizational levels.
• Must be able to work in a fast paced and changing environment while handling multiple tasks, priorities, and directives. Capable of working under pressure.
• Experience maintaining information security competency through ongoing professional development and staying abreast of emerging technologies, risks and controls in information and cyber security.
• Experience collaborating with audit L3 teams globally to allow definition of effective assessments on information and cyber security risk management.
• Experience working closely with Information Security, product, and software development teams to assess cybersecurity risk, cloud controls, and recommend solution and remediation in the cloud environment.
• The following certifications are nice to have: CISSP, OSCP, OSCE, GIAC Web Application Penetration Tester (GWAPT), CEH, CompTIA Security +

What can we offer you?

• A competitive salary and benefits packages.
• A growth trajectory that extends upward and outward, encouraging you to follow your passions and learn new skills.
• A focus on growing your career path with us.
• Flexible work policies and strong work-life balance.
• Professional development and leadership opportunities.

Our commitment to you

• Values-first culture
• We lead with our Values every day and bring them to life together.
• Boundless opportunity
• We create opportunities to learn and grow at every stage of your career.
• Continuous innovation
• We invite you to help redefine the future of financial services.
• Delivering the promise of Diversity, Equity and Inclusion
• We foster an inclusive workplace where everyone thrives.
• Championing Corporate Citizenship
• We build a business that benefits all stakeholders and has a positive social and environmental impact.

About Manulife and John Hancock

Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit https://www.manulife.com/en/about/our-story.html.

Manulife is an Equal Opportunity Employer

At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.

It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact [email protected].

Toronto, OntarioHybrid

Salary range is expected to be between

$94,220.00 CAD - $174,980.00 CAD

If you are applying for this role outside of the primary location, please contact [email protected] for the salary range for your location. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance.

Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact [email protected] for more information about U.S.-specific paid time off provisions.