GCP Security Engineer

Norton Blake; City Of London; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A leading company is seeking a GCP Security Engineer for a 6-month project in London/Hybrid. The role involves securing cloud infrastructure on Google Cloud Platform, requiring experience in DevSecOps, threat modeling, and a strong technical background. Candidates must have a deep understanding of GCP, CISSP certification, and skills in BigQuery, SQL, and Terraform. A collaborative approach with engineering teams to implement security best practices and monitor incidents is essential.

Qualifications

• Understand Google Cloud Platform (GCP) and security services.
• Possess CISSP certification or equivalent experience.
• Experience with data governance and DevSecOps frameworks.

Responsibilities

• Design and maintain security controls across GCP services.
• Collaborate with engineering for security best practices in CI/CD.
• Monitor and respond to security incidents in GCP.

Skills

GCP

CISSP

DevSecOps

Python

Big Data Analytics

Tools

Terraform

Google BigQuery

SQL

Job description

Social network you want to login/join with:

GCP Security Engineer, 6 months, London/Hybrid, £660/day (Inside IR35)

Overview:
We are seeking a highly skilled GCP Security Engineer to join a high-profile security transformation programme within a dynamic, enterprise-scale environment. This role will be instrumental in securing cloud infrastructure, data, and applications on Google Cloud Platform.

You will work closely with architecture, DevOps, and engineering teams to embed robust security controls across the cloud estate. The ideal candidate will be a hands-on practitioner with experience in threat modelling, and a solid understanding of DevSecOps principles.

GCP- IAM, VPC Perimeters, VPC Security Controls, Cloud Storage, Cloud Operations(Monitoring, alerting), Private networking(PSA, PSC), Google DNS

Candidate should possess a deep understanding of Google Cloud Platform (GCP), CISSP certification, and a robust skill set in various technologies, including Google BigQuery, SQL, DevSecOps, Data Pipelines, ETL, Continuous Delivery (CD), Continuous Integration (CI), Design Patterns, Object-Oriented Programming (OOP), Data Science, Terraform, MLOps, Infrastructure as code (IaC), Machine Learning, Python, and Big Data Analytics.

Terraform – Terraform Test, terraform Compliance test , Private registry

Must haves:

• Design, implement, and maintain security controls across GCP services
• Good understanding of security control implementation framework like OPA, GCP org policies,GCP SHAs, chef inspec
• Understand threat modelling activities for new and existing workloads
• Collaborate with engineering teams to integrate security best practices into CI/CD pipelines
• Support audit and compliance initiatives across GCP environments
• Monitor and respond to security incidents and vulnerabilities in GCP
• Extensive hands-on experience with Google Cloud Platform (GCP) security services
• Strong knowledge of Google BigQuery, SQL, and data access governance
• CISSP certification (or equivalent experience in cloud security)
• Proven track record of working within DevSecOps frameworks and secure SDLC
• Comfortable working in a hybrid model with 2-3 days onsite in London
• Develop and maintain security documentation, policies, and procedures.

Good to have:

• Data Products
• Terraform Cloud, Sentinal policies
• Developing Helm Charts and using them to deploy workloads to GKE.