Senior Cloud Security Engineer (GCP)

For one of our clients, we are looking for an experienced Senior Cloud Security Engineer to lead the design, implementation, and management of a modern Google Cloud security architecture.Key ResponsibilitiesArchitect, deploy, and manage Google Cloud Security Command Center Enterprise as the centralized platform for cloud security visibility and operations.Implement and manage Cloud Security Posture Management (CSPM) to identify misconfigurations, improve security posture, and support compliance requirements.Develop the organization’s Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) strategy to discover, classify, monitor, and protect sensitive data across Google Cloud environments.Design and manage VPC Service Controls to establish secure perimeters around sensitive resources and reduce data exfiltration risks.Deploy and tune Container Threat Detection within Google Kubernetes Engine (GKE) to identify anomalous activity and protect containerized workloads.Manage Google Cloud SecOps, formerly Chronicle, as the primary platform for security telemetry ingestion, detection engineering, and threat hunting.Configure and manage Google Cloud Armor, including WAF rules and DDoS protection, for public-facing applications and services.Engineer and optimize SIEM capabilities to detect high-fidelity threats at scale.Build and maintain SOAR playbooks for automated alert triage, enrichment, investigation, and containment.Lead the investigation and resolution of complex security threat cases.Perform deep technical analysis of active threats and collaborate with the SOC and wider technology teams on remediation.Continuously improve cloud security controls, detection logic, response processes, and operational documentation.RequirementsAt least 5 years of experience in cloud security, with strong hands-on expertise in Google Cloud environments.Proven experience deploying, configuring, and tuning:Google Cloud Security Command CenterGoogle Cloud SecOps / ChronicleGoogle Cloud ArmorVPC Service ControlsGoogle Cloud DLP and related data protection toolsStrong understanding of Google Cloud security architecture, IAM, networking, logging, monitoring, and security controls.Practical experience securing Kubernetes and Google Kubernetes Engine (GKE) environments.Knowledge of container runtime security, container threat detection, and workload protection.Experience with SIEM, SOAR, threat detection, threat hunting, and incident response.Ability to design and automate security operations workflows and response playbooks.Strong analytical and problem-solving skills, with the ability to investigate complex security incidents.Excellent communication skills and the ability to work effectively with security, infrastructure, DevOps, and SOC teams.Professional working proficiency in English.Preferred QualificationsGoogle Cloud Professional Cloud Security Engineer certification.Experience with security and compliance frameworks such as ISO 27001, NIST, CIS, or PCI DSS.Experience with infrastructure-as-code and security automation.Familiarity with DevSecOps practices and cloud-native application security.Experience operating security platforms in large-scale or highly regulated environments.