Description

You will secure and automate software development processes within a Google Cloud Platform environment.

Responsibilities

• Develop and maintain Rego policies to enforce security controls and compliance across GCP infrastructure.
• Integrate automated security checks and scans into GCP-focused CI/CD pipelines.
• Architect secure microservices and containerized applications following GCP security best practices.
• Manage GCP resources through infrastructure-as-code using Terraform.
• Perform security assessments, threat modeling, and risk assessments for GCP deployments.
• Respond to GCP-specific security incidents and conduct root cause analysis.

Required Skills

• 8+ years of experience in DevSecOps roles.
• Deep expertise in Google Cloud Platform (GCP) services and security controls.
• Hands-on experience implementing Rego policies and policy-as-code.
• Proficiency with Terraform for infrastructure-as-code (IaC) provisioning.
• Experience with CI/CD automation tools including Jenkins and GitLab CI/CD.
• Strong understanding of container security and securing microservices on GCP.
• Ability to use GCP-specific security tools and vulnerability scanners.
• Bachelor's degree in Computer Science, Information Security, or equivalent experience.

Preferred Skills

• Google Professional Cloud Security Engineer certification.
• Google Professional DevOps Engineer certification.

Key Skills

Education

Bachelor's degree in computer science, Information Security