Cyber Security Engineer

Aditi Consulting; Colombia; On-site; COP 220,734,309 - 294,312,412; Full time

Job summary

A leading consulting firm is seeking a Cyber Security Engineer in Colombia to enhance GCP security and IAM governance. The candidate will be crucial in ensuring end-to-end data protection, working alongside engineering and compliance teams. Responsibilities include security architecture reviews, database security, and IAM validation, while preferred qualifications include experience with analytics tools and a background in financial services. Strong communication and autonomy are required in this pivotal role.

Qualifications

• Strong hands-on experience with Google Cloud Platform (GCP) security.
• Expertise in IAM, including service accounts and workload identity federation.
• Experience implementing VPC Service Controls and perimeter-based protections.
• Strong knowledge of threat modeling, risk assessments, and vulnerability management.

Responsibilities

• Perform security architecture reviews for data pipelines and APIs.
• Lead secure database enablement and data exposure for analytics.
• Conduct IAM validation across users and service accounts.
• Support penetration testing and secure code reviews.

Skills

Google Cloud Platform (GCP) Security

Identity & Access Management (IAM)

Cloud KMS

Secret Manager

Cloud Armor

Pub/Sub security

BigQuery security

Cloud Storage security

Job description

Aditi is seeking a Cyber Security Engineer with deep expertise in Google Cloud Platform (GCP) security and Identity & Access Management (IAM) to support a high‑visibility initiative focused on securely exposing sensitive data for analytics and user‑level loan‑risk dashboards. This role is critical in ensuring end‑to‑end data protection—from ingestion and asynchronous processing to dashboard consumption—while maintaining strict compliance standards and minimizing enterprise risk. You will work closely with engineering, analytics, and compliance teams to deliver secure, scalable, and compliant cloud architectures.

Responsibilities

Security Design & Architecture

• Perform security architecture reviews for data pipelines, APIs, cloud workloads, and dashboards
• Define and enforce secure patterns for asynchronous and event‑driven architectures (Pub/Sub, service‑to‑service communication)
• Guide engineering teams in implementing secure‑by‑design controls across GCP platforms

Data Security & Enablement

• Lead secure database enablement and data exposure for analytics and risk stakeholders
• Implement data protection controls including encryption, tokenization, IAM‑based segmentation, and auditing
• Ensure secure delivery of loan‑risk dashboards and sensitive user‑level insights

IAM & Access Controls

• Conduct IAM validation across users, service accounts, workloads, and dashboards
• Enforce least‑privilege access, RBAC policies, Security Command Center (SCC), and continuous access governance
• Support authentication and authorization models across microservices and data systems

Threat, Vulnerability & Compliance

• Support penetration testing, secure code reviews, and vulnerability remediation effortsAlign architectures with PCI, SOC 2, GDPR, and PayPal internal governance frameworks
• Document security controls and risk mitigations for audit and compliance stakeholders

Required Qualifications

• Strong hands‑on experience with Google Cloud Platform (GCP) security
• Expertise in IAM, including service accounts and workload identity federation
• Experience with Cloud KMS, Secret Manager, and Cloud Armor
• Strong knowledge of Pub/Sub, Cloud Storage, and BigQuery security
• Experience implementing VPC Service Controls and perimeter‑based protections
• Deep understanding of IAM frameworks (RBAC, ABAC, OAuth2, OIDC, SAML)
• Strong background in API security, service‑mesh authentication, and mTLS
• Experience designing and securing asynchronous and event‑driven systems
• Solid knowledge of threat modeling, risk assessments, vulnerability management, and penetration testing support

Preferred Qualifications

• Experience with Tableau, Looker, or similar analytics/dashboarding tools
• Background in financial services, lending, or credit‑risk environments
• Experience with security automation, including CI/CD hardening and scripting (Python or Bash)
• Knowledge of Zero Trust, DLP, CASB, and enterprise security monitoring tools
• Familiarity with Claude AI

Soft Skills

• Strong communication skills with the ability to translate security risks into business‑aligned recommendations
• Highly autonomous, organized, and comfortable working in milestone‑based delivery models
• Detail‑oriented with strong judgment around data risk and regulatory compliance
• Ability to collaborate effectively with cross‑functional technical and non‑technical teams

Must Have Skill

• Google Cloud Platform (GCP) Security
• Identity & Access Management (IAM)
• Cloud KMS, Secret Manager, Cloud Armor
• Pub/Sub, BigQuery, Cloud Storage security