Senior GCP Security Engineer: Cloud Defense & Automation

Engine by Starling; Greater London; Hybrid; GBP 100,000 - 150,000; Full time

Benefits offered by this job

33 days holiday

Private Medical Insurance

Cycle to Work

Pension scheme

Job summary

Engine by Starling is seeking a Senior GCP Security Engineer to own the security foundations of our Google Cloud Platform. You will design and implement secure, scalable infrastructure, IAM, and compliance controls in collaboration with Security, Infrastructure and product teams.

The role covers identity management, vulnerability management, incident response, and DevSecOps advocacy, with a hands-on focus on GKE, Terraform, and cloud-native security tooling.

Qualifications

• Proven experience designing and implementing GCP security architectures.
• Hands-on with GKE, IAM, and zero-trust/VM hardening in Google Cloud.
• Experience building secure, compliant infrastructure using IaC (Terraform).

Responsibilities

• Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture)
• Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code
• Ensure secure user access, authentication and authorisation mechanisms are in place
• Engineer and automate technical controls within GCP to ensure continuous compliance with PCI DSS and 3DS
• Drive security infrastructure deployments across growing environments
• Perform regular security assessments, audits, threat modelling and architecture design reviews
• Lead incident response efforts, including investigation and remediation of security breaches
• Support internal security awareness and training programs, advocating the DevSecOps mindset

Skills

GCP security

GKE security

Terraform

GCP IAM

Kubernetes security

RBAC

Threat modelling

Python/Go scripting

Security architectures

Security monitoring

Tools

Terraform

Job description

Engine by Starling is seeking a Senior GCP Security Engineer to own the security foundations of our Google Cloud Platform. You will design and implement secure, scalable infrastructure, IAM, and compliance controls in collaboration with Security, Infrastructure and product teams.

The role covers identity management, vulnerability management, incident response, and DevSecOps advocacy, with a hands-on focus on GKE, Terraform, and cloud-native security tooling.