Senior GCP Security Engineer - Cloud Defender

Starling; City Of London; Hybrid; GBP 120,000 - 150,000; Full time

Benefits offered by this job

33 days holiday

Birthday leave

Pension scheme

Private Medical Insurance

Job summary

Engine by Starling is seeking a Senior GCP Security Engineer to own the security foundations of our Google Cloud Platform and collaborate with information security, infrastructure and Engine technology teams to embed security into all processes.

You will design and deploy secure GCP infrastructure, implement IAM and access controls, and automate security controls to ensure continuous compliance with PCI DSS and 3DS across our environments.

Qualifications

• Mature understanding of cloud security architecture with deep expertise in GCP
• Experience configuring GCP landing zones, IAM, VPC Service Controls
• Proven ability to design, build and operate secure, scalable GCP infrastructure using IaC
• Strong scripting skills in Python/Go for automation and tooling
• Experience leading incident response and security validation across cloud environments
• Knowledge of PCI DSS, 3DS and security compliance frameworks

Responsibilities

• Define and own our Google Cloud security architecture in collaboration with security and infra teams
• Design, document, build and maintain secure GCP infrastructure using Infrastructure as Code
• Ensure secure access, authentication and authorization across systems
• Automate security controls in GCP to demonstrate continuous compliance with PCI DSS and 3DS
• Lead security deployments across growing environments and perform risk assessments
• Drive incident response, investigation and remediation of breaches
• Promote DevSecOps practices and security awareness across the team

Skills

GCP security architecture

GKE security

Terraform

Security engineering

Incident response

Python/Go scripting

CI/CD security

OWASP/MITRE frameworks

Tools

Terraform

GKE

Cloud IAM

Job description

Engine by Starling is seeking a Senior GCP Security Engineer to own the security foundations of our Google Cloud Platform and collaborate with information security, infrastructure and Engine technology teams to embed security into all processes.

You will design and deploy secure GCP infrastructure, implement IAM and access controls, and automate security controls to ensure continuous compliance with PCI DSS and 3DS across our environments.