Cloud Security Engineer GCP
Posted Updated
Description
Must Have Technical/Functional Skills
- Hands-on experience performing security assessments of GCP environments.
- Strong practical knowledge of core GCP services, including IAM, VPC, Compute Engine, Cloud Storage, Cloud SQL, GKE, Cloud KMS, Cloud Logging, and Security Command Center
- Experience working with GitHub repositories, including reviewing code and configuration files (e.g., JSON) for security, policy, or infrastructure validation purposes
- Experience evaluating GCP architectures for secure identity design, privilege access, network segmentation, and encryption strategies
- Understanding of GCP’s shared responsibility model and organization policy framework
- Familiarity with GCP-native security tooling (e.g., Security Command Center, Event Threat Detection, Cloud Asset Inventory, Forseti or similar governance tools)
- Experience mapping GCP implementations to recognized control frameworks (e.g., NIST, ISO 27001, CIS GCP Foundations, CSA CCM)
- Ability to review Infrastructure-as-Code (Terraform, Deployment Manager) for security risks and policy compliance
- Strong documentation and communication skills for technical and governance audiences
Roles & Responsibilities
- The Cloud Security Engineer performs comprehensive security reviews of Google Cloud Platform (GCP) services and architectures to ensure alignment with enterprise security standards, regulatory requirements, and risk management practices.
- This role evaluates GCP-based solutions across infrastructure, platform, and application layers, providing actionable security guidance to promote secure-by-design adoption and support governance and certification processes.
- In addition, the role provides engineering support for GCP platform cybersecurity capabilities, including implementation of security controls, integration of native services, and enablement of cloud service certification and authorization processes.
- The position enhances consistency, scalability, and quality of GCP security assessments across the organization.
Key responsibilities:
- Cloud Security Review and Assessment
- Security Standards and Control Alignment
- GCP Platform Cybersecurity Engineering
- Platform Integration and Collaboration