Cybersecurity Engineer

JOB SUMMARY

The mission of the individual in this role is to apply strong cybersecurity engineering knowledge to mitigate cyber security risk with a focus on Secrets Management. Working under the direction of senior engineers and product leadership, this individual implements, integrates, and maintains enterprise secrets management capabilities across multi-cloud and hybrid environments. They partner with the CBRE business, Digital & Technology, and other partner organizations (Compliance, Risk Management, Audit, and Legal) to integrate security processes, tools, and people into the business culture, contributing to a holistic security ecosystem with reliable protection and monitoring capabilities globally. This individual executes on complex initiatives that drive problem resolution and contributes to a progressive development team with a mindset toward being agile and solving problems iteratively.

Experience in all skills listed is not necessary to be qualified for the position. If you have relevant similar experience, we still want to talk to you.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Implement, configure, and maintain enterprise secrets vaulting solutions across multi-cloud and hybrid environments, using tools such as HashiCorp Vault, Akeyless, AWS Secrets Manager, GCP Secrets Manager, and Azure Key Vault.
• Build and maintain secure, reusable patterns and automation workflows for the management of application and machine secrets, including API keys, credentials, and other secret types.
• Apply and help enforce governance policies and controls for least privilege access, lifecycle management, and secrets rotation aligned with enterprise compliance frameworks (e.g., NIST, CIS, ISO 27001).
• Support integration of secrets management into CI/CD pipelines, container platforms (e.g., Kubernetes), and DevSecOps toolchains to enable secure application delivery.
• Assist with risk assessments and architectural reviews for secrets usage across infrastructure, applications, and third-party integrations, identifying misconfigurations or policy violations.
• Develop and maintain Infrastructure as Code (IaC) patterns for secrets provisioning using tools such as Terraform.
• Partner with platform, cloud, and application teams to promote secure secrets practices and enable vault adoption through enablement, documentation, and training.
• Monitor secrets usage and access activity using logging, telemetry, and SIEM integrations to detect anomalies and support auditability.
• Support incident response and forensics efforts related to secrets exposure or misuse, collaborating with incident management and threat detection teams.
• Contribute to the continuous improvement of the secrets management architecture, staying current with threat models, emerging tools, and industry best practices.
• Provide technical support for identity and access management and secrets management products, adjusting and updating existing solutions as needed.
• Participate in an on-call rotation to help ensure the uptime and functionality of critical internal customer services.
• Hold well-founded opinions and be willing to express disagreement when something doesn't pass the 'smell test.'
• Other duties as assigned.

EDUCATION and EXPERIENCE

• Bachelor's degree (BA/BS) in a related field preferred or 3-5 years of relevant enterprise experience.
• Hands-on experience implementing or integrating at least one enterprise or cloud secrets service such as HashiCorp Vault, Akeyless, AWS Secrets Manager, Azure Key Vault, or GCP Secret Manager.
• Intermediate experience administering security-based tools related to CSPM/CNAPP, CIEM, SIEM, or vulnerability scanners (OSA, SAST, DAST).
• Working knowledge of a second cloud provider (e.g., AWS, Azure, GCP, Alibaba) in addition to the primary platform.
• Intermediate experience writing and running Terraform.
• Intermediate Linux systems administration experience or equivalent skills.
• Intermediate experience with DevOps or CI/CD pipelines (GitHub Actions, GitLab, Jenkins, ADO Pipelines, etc.).
• Working knowledge of source control management and practices using Git and GitHub.
• Experience onboarding and integrating third-party PaaS and SaaS solutions.

OTHER SKILLS and/or ABILITIES

• Experience with the Microsoft ecosystem and directory services such as Active Directory / Entra ID.
• Understanding of backend software application administration and integrating with third-party sources.
• Understanding of system integration design patterns at enterprise scale.
• Working knowledge of Microsoft Office products (Word, Excel, Outlook, etc.).
• Organizational skills with an inquisitive mindset and a willingness to take a new perspective on existing solutions.

COMMUNICATION SKILLS

• Strong written and verbal communication skills with the ability to explain cybersecurity concepts clearly across technical and business stakeholders. Able to document standards, author technical material, and collaborate effectively across engineering, operations, and compliance teams.

REASONING ABILITY

• Strong analytical and decision-making skills with experience solving cybersecurity problems. Able to evaluate competing technical solutions, apply risk-based reasoning, and exercise judgment based on the analysis of multiple sources of information to improve enterprise security posture and operational resilience.

Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.

Why CBRE?

When you join CBRE, you become part of the global leader in commercial real estate services and investment that helps businesses and people thrive. We are dynamic problem solvers and forward-thinking professionals who create significant impact. Our collaborative culture is built on our shared values - respect, integrity, service and excellence - and we value the diverse perspectives, backgrounds and skillsets of our people. At CBRE, you have the opportunity to chart your own course and realize your potential. We welcome all applicants.

Applicant AI Use Disclosure

We value human interaction to understand each candidate's unique experience, skills and aspirations. We do not use artificial intelligence (AI) tools to make hiring decisions, and we ask that candidates disclose any use of AI in the application and interview process.

CBRE carefully considers multiple factors to determine compensation, including a candidate’s education, training, and experience. The minimum salary for the Cybersecurity Engineer position is $95,000 annually [or $45.67 per hour] and the maximum salary for the Cybersecurity Engineer position is $100,000 annually [or $48.08 per hour]. The compensation that is offered to a successful candidate will depend on the candidate’s skills, qualifications, and experience. Successful candidates will also be eligible for a discretionary bonus based on CBRE’s applicable benefit program.

Equal Employment Opportunity: CBRE is an equal opportunity employer that values diversity. We have a long-standing commitment to providing equal employment opportunity to all qualified applicants regardless of race, color, religion, national origin, sex, sexual orientation, gender identity, pregnancy, age, citizenship, marital status, disability, veteran status, political belief, or any other basis protected by applicable law.

Candidate Accommodations: CBRE values the differences of all current and prospective employees and recognizes how every employee contributes to our company’s success. CBRE provides reasonable accommodations in job application procedures for individuals with disabilities. If you require assistance due to a disability in the application or recruitment process, please submit a request via email at recruitingaccommodations@cbre.com or via telephone at +1 866 225 3099 (U.S.) and +1 866 388 4346 (Canada).

CBRE, Inc. is an Equal Opportunity and Affirmative Action Employer (Women/Minorities/Persons with Disabilities/US Veterans)