Senior Cloud Security Engineer, GCP

Jobtailor; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Jobtailor seeks a seasoned Cloud Security Engineer to design and maintain secure, scalable GCP infrastructure using Infrastructure as Code. You will own cloud security architecture, identity and access controls, and continuous compliance.

Lead incident response, threat modelling and architecture reviews, and collaborate with Information Security, Infrastructure and Engineering teams to deploy secure, auditable solutions. Strong GCP/Kubernetes security and Terraform skills are essential.

Qualifications

• Extensive experience in Google Cloud security architecture.
• Proven track record in GCP landing zone design and governance.
• Deep knowledge of GCP IAM and its limitations.
• Experience with IaC tooling, especially Terraform.
• Strong incident response, risk assessment and threat modelling skills.
• Familiarity with PCI DSS, NIST, SOC 2, ISO 27001 standards.

Responsibilities

• Define and implement GCP security architecture and IAM controls.
• Design, document, and maintain secure GCP infrastructure using IaC.
• Lead incident response and remediation efforts.
• Assess risks, conduct threat modelling and architecture reviews.
• Coordinate security with Information Security, Infra and Eng teams.
• Ensure PCI DSS readiness and ongoing security compliance.

Skills

GCP security

IAM management

Kubernetes security

Threat modelling

Incident response

Security auditing

Education

CISSP

CCSP

CISM

GCP Professional Cloud Security Engineer

AWS Security Specialty

Tools

Terraform

GKE

Cloud KMS

Artifact Registry

Binary Authorization

Security Command Center

VPC Service Controls

Shared VPC

RBAC

Cloud Logging

Monitoring

Job description

• Help keep infrastructure secure and compliant and staff safe and productive
• Define Google Cloud security architecture covering cloud identity, runtime security and security posture
• Design, document, build and maintain secure, scalable GCP infrastructure using Infrastructure as Code
• Safeguard systems, applications and data through secure access, authentication and authorisation mechanisms
• Engineer and automate GCP technical controls for continuous compliance with PCI DSS and 3DS
• Drive security infrastructure deployments across growing environments
• Perform security assessments, audits, threat modelling and architecture design reviews
• Identify and triage risks and vulnerabilities, and design corrective security controls
• Lead incident response, including investigation and remediation of security breaches
• Support security awareness and training programs
• Advocate the DevSecOps mindset across technology teams
• Collaborate with Information Security, Infrastructure and Engine Technology teams

Requirements

• Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record
• Experience creating a GCP landing zone, including organisation policies and VPC Service Controls
• Deep understanding of GCP IAM and its limitations
• Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP, including GKE, Compute Engine, Shared VPC and Cloud SQL
• Expertise in Kubernetes, securing GKE clusters and meshes; Cilium preferable
• Networking best practices and RBAC implementation
• Experience with Infrastructure as Code and provisioning tools, particularly Terraform
• Experience configuring GCP-native security posture and threat management with Security Command Center
• Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis
• Experience with Cloud KMS, Cloud External Key Manager, Secret Manager and cryptographic key ceremonies
• Experience with Workload Identity and Workload Identity Federation
• Experience configuring cloud-native security logging, monitoring and detection services
• Strong programming skills in Python, Go and other languages
• In-depth knowledge of security principles, technologies, best practices, threat detection and mitigation strategies
• Knowledge of OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics
• Ability to identify threats, attack vectors and vulnerabilities
• Ability to document security requirements
• Excellent problem-solving, communication and active listening skills
• Ability to identify security gaps and create risk‑minimising solutions
• Proactive approach to staying updated with security threats and vulnerabilities
• Thorough understanding of the incident response process
• Desirable: network security, TCP/IP, BGP, VPNs, firewalls, WAFs, IDS/IPS and hybrid GCP/on‑premise connectivity
• Desirable: Assured Workloads and Access Transparency
• Desirable: NIST, SOC 2, ISO 27001 and PCI DSS experience
• Desirable: container provenance, Sigstore, Notary, container runtimes and software development lifecycle security
• Desirable: SAST/DAST and secure code reviews
• Desirable: cryptography management
• Desirable: ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer certifications

Core Competencies

Demonstrates expertise in Google Cloud security architecture, including the design and maintenance of secure, scalable GCP infrastructure using Infrastructure as Code. Proficient in incident response, risk assessment, and implementing security controls to ensure compliance with standards such as PCI DSS.

Highest-signal resume keywords

• Google Cloud Security Architecture
• Infrastructure as Code
• GCP IAM Management
• Kubernetes Security
• Security Compliance Audits

ATS Optimization Keywords

Hard Skills

• Python Programming
• Go Programming
• Terraform
• GKE Security
• Cloud KMS
• Security Command Center
• RBAC Implementation
• Threat Modelling
• Incident Response
• VPC Service Controls

Soft Skills

• Problem-Solving
• Communication
• Active Listening

Certifications & Qualifications

• CISSP
• CCSP
• CISM
• GCP Professional Cloud Security Engineer
• AWS Security Specialty

Industry Keywords

• PCI DSS
• NIST
• SOC 2
• ISO 27001
• OWASP Top 10
• MITRE ATT&CK Framework
• Network Security
• Threat Detection
• Cryptography Management
• Container Security

Tools & Technologies

• GCP
• Cloud SQL
• Shared VPC
• Binary Authorization
• Artifact Registry
• Secret Manager
• Security Logging
• Monitoring Services
• IDS/IPS
• WAFs