Senior Cloud Security Engineer Google Cloud

We are looking for an experienced Senior Cloud Security Engineer to lead the design, implementation, and management of our Google Cloud security architecture.

This role sits at the intersection of proactive cloud security posture management and reactive threat detection and response, leveraging Google Cloud's modern security ecosystem to protect infrastructure, containerized workloads, applications, and sensitive data.

The ideal candidate will have strong hands-on experience across Google Cloud security, Security Command Center, Google SecOps, Kubernetes/GKE security, data protection, SIEM/SOAR and network security.

Key Responsibilities

Google Cloud Security Platform

• Architect, deploy, configure, and manage Google Cloud Security Command Center (SCC) Enterprise as the centralized platform for cloud security visibility and operations.
• Establish and continuously improve security monitoring and operational capabilities across Google Cloud environments.

Cloud Security Posture & Data Protection

• Implement Cloud Security Posture Management (CSPM) to continuously identify cloud misconfigurations and support compliance requirements.
• Drive Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) initiatives to discover, classify, monitor, and protect sensitive data.
• Design and manage VPC Service Controls to establish secure perimeters around sensitive resources and reduce data-exfiltration risks.
• Implement attribute-based access controls and context-aware security policies where required.

Threat Detection & Cloud Workload Security

• Deploy and tune Container Threat Detection within Google Kubernetes Engine (GKE).
• Identify anomalous behavior and security threats affecting containerized workloads.
• Configure and manage Google Cloud Armor to protect public-facing applications against DDoS attacks and web-based exploits.
• Develop and maintain appropriate WAF rules to strengthen application and network security.

SecOps, SIEM & Incident Response

• Manage Google Cloud SecOps as the primary platform for security telemetry ingestion, monitoring, investigation, and threat hunting.
• Engineer and optimize SIEM capabilities to detect high-fidelity threats at scale.
• Build and maintain SOAR playbooks to automate triage, enrichment, investigation, and rapid containment.
• Lead investigations into complex security threat cases, providing deep technical analysis and coordinating with the broader SOC team.
• Support the rapid containment and resolution of active security threats.

Requirements

• 5+ years of dedicated cloud security experience, with strong technical expertise in Google Cloud/GCP environments.
• Hands-on experience deploying, configuring, and tuning Google Cloud Security Command Center (SCC).
• Hands-on experience with Google Cloud SecOps / Chronicle.
• Practical experience with GCP-native data protection tools, including DSPM and DLP.
• Strong understanding of Kubernetes and Google Kubernetes Engine (GKE) security, including container runtime environments.
• Experience with cloud security posture management and cloud misconfiguration detection.
• Experience with VPC Service Controls and cloud perimeter security.
• Experience with Google Cloud Armor and WAF security controls.
• Strong knowledge of SIEM, SOAR, threat detection, threat hunting and incident response.
• Preferred: Google Cloud Professional Cloud Security Engineer certification.