Description

You will secure the Google Cloud Platform environment by embedding security practices directly into the DevOps lifecycle.

This role is on-site.

Responsibilities

• Embed security controls into CI/CD pipelines to automate protection within the software development lifecycle.
• Develop and maintain secure Infrastructure as Code templates using Terraform or Cloud Deployment Manager.
• Manage and enforce IAM policies to ensure least privilege access across all GCP services.
• Implement security monitoring and logging using Google Cloud Security Command Center and Stackdriver.
• Conduct vulnerability scans and assessments on GCP resources to identify and mitigate risks.

Required Skills

• 3+ years of experience in information security with a focus on cloud security, specifically GCP.
• Proficiency in scripting and automation using Python, Bash, or Go.
• Hands-on experience with container security, including Kubernetes and Docker.
• Deep knowledge of GCP security services such as IAM, VPC, Cloud Armor, and Data Loss Prevention.
• Experience with CI/CD tools like Jenkins or GitLab.
• Familiarity with security frameworks including CIS and NIST.

Preferred Skills

• Advanced degree in a technical field.
• Google Cloud Professional Cloud Security Engineer or CISSP certification.

Key Skills

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity