Cloud Security Engineer GCP

Must Have Technical/Functional Skills

• Hands-on experience performing security assessments of GCP environments.
• Strong practical knowledge of core GCP services including IAM VPC Compute Engine Cloud Storage Cloud SQL GKE Cloud KMS Cloud Logging and Security Command Center
• Experience working with GitHub repositories including reviewing code and configuration files (e.g. JSON) for security policy or infrastructure validation purposes
• Experience evaluating GCP architectures for secure identity design privilege access network segmentation and encryption strategies
• Understanding of GCPs shared responsibility model and organization policy framework
• Familiarity with GCP-native security tooling (e.g. Security Command Center Event Threat Detection Cloud Asset Inventory Forseti or similar governance tools)
• Experience mapping GCP implementations to recognized control frameworks (e.g. NIST ISO 27001 CIS GCP Foundations CSA CCM)
• Ability to review Infrastructure-as-Code (Terraform Deployment Manager) for security risks and policy compliance
• Strong documentation and communication skills for technical and governance audiences

Roles & Responsibilities

• The Cloud Security Engineer performs comprehensive security reviews of Google Cloud Platform (GCP) services and architectures to ensure alignment with enterprise security standards regulatory requirements and risk management practices.
• This role evaluates GCP-based solutions across infrastructure platform and application layers providing actionable security guidance to promote secure-by-design adoption and support governance and certification processes.
• In addition the role provides engineering support for GCP platform cybersecurity capabilities including implementation of security controls integration of native services and enablement of cloud service certification and authorization processes.
• The position enhances consistency scalability and quality of GCP security assessments across the organization.

Key responsibilities:

• Cloud Security Review and Assessment
• Security Standards and Control Alignment
• GCP Platform Cybersecurity Engineering
• Platform Integration and Collaboration