GCP Security Engineer

Casado; Brazil; On-site; BRL 360,000 - 600,000; Full time

Job summary

Casado is seeking an experienced Security Architect to design and implement secure cloud policies and services, with a focus on Google Cloud Platform. You will lead threat analysis, governance, and regulatory controls while guiding engineers and executives on robust security strategies.

Responsibilities include establishing secure Landing Zones, Data and AI Foundations, and implementing secure IaC and container security with Terraform and GKE.

Qualifications

• 6+ years of experience in architecting and implementing secure policies and services on cloud platforms (prefer GCP).
• Expertise in security threat analysis and mitigation using SIEM tools (e.g., Chronicle, Wiz).
• Experience defining security strategies and governance with CISO and Security Engineers.
• Proven ability to enforce regulatory controls with SOC/SecOps teams.

Responsibilities

• Define and implement secure landing zones, data, and AI foundations for complex environments.
• Lead security strategy discussions with executives and engineering teams to align with business goals.
• Design and enforce IAM, boundary protections, and secure communications across workloads.
• Drive DevSecOps practices, Secure CI/CD pipelines, and IaC-based deployments.

Skills

GCP security

Threat analysis

SIEM

Security strategy

Compliance & controls

IAM

Network security

AI automation

Terraform

GKE security

Tools

Chronicle

Wiz

Security Command Center

Terraform

GKE

Job description

• Experience: 6+ years of experience architecting and implementing secure policies and services, preferably on Google Cloud Platform (GCP).
• Threat Analysis & SIEM: Expertise in security threat analysis and mitigation using SIEM tools such as Google SecOps (formerly Chronicle), Wiz, and similar security platforms.
• Security Strategy & Governance: Experience defining security strategies and collaborating with the CISO and Security Engineers to design and implement robust security strategies and governance requirements.
• Compliance & Controls: Proven ability to enforce regulatory controls and collaborate with SOC or SecOps teams to support strict compliance requirements.
• IAM & Resource Hierarchy: Expert in Identity and Access Management (IAM), defining resource hierarchies, establishing boundary protection, securing communications, and implementing Workload Identity Federation (WIF) best practices.
• Network Security & Observability: Proficient in designing and implementing network security defenses (e.g., Cloud Firewall, Cloud Armor, VPC), ensuring data protection, and leveraging observability tools (logging, monitoring, and Security Command Center) for threat detection and management.
• AI Automation: Expertise in leveraging AI agents to automate, expedite, and de-risk complex security and infrastructure deployment tasks.
• Secure Landing Zones & AI Foundations: Expertise in establishing secure Landing zones, Data, and AI Foundations, including setting up perimeters for:User-to-AgentAgent-to-AgentAgent-to-Services communication
• IaC & Container Security: Skilled in driving security-focused digital transformation using Infrastructure as Code (e.g., Terraform) for compliance-driven deployment of security foundations, orchestrating secure containerized workloads via Google Kubernetes Engine (GKE)
• Best Practices: Security, and securing software CI/CD and DevSecOps pipelines.
• Consulting & Stakeholder Management: Proven track record in Professional Services and Technical Consulting, with demonstrated ability in project management, communication, collaboration, and negotiation skills to bridge complex technical requirements with executive business goals.