Senior GCP Security Engineer – Secure Cloud Foundations

Engine by Starling; Greater London; Hybrid; GBP 90,000 - 150,000; Full time

Job summary

Engine by Starling seeks a senior GCP Security Engineer to own security foundations across our Google Cloud Platform environment. You will collaborate with Information Security, Infrastructure and engineering teams to design, implement, and automate security controls, ensuring compliance with PCI DSS and 3DS.

The role is hybrid, based near London, and involves working across identity, access management, cloud security architecture, and security monitoring to keep systems secure and resilient.

Qualifications

• Deep expertise in GCP and proven security track record.
• GCP landing zone, org policies, and VPC Service Controls experience.
• Strong IAM knowledge and workload identity concepts.
• Experience with containers, microservices and immutable infrastructure on GCP (GKE, Compute Engine).
• CKA/CKS or similar is a plus; Terraform and IaC required.
• Experience with security logging, monitoring and threat detection.

Responsibilities

• Define our Google Cloud security architecture with stakeholders.
• Design and maintain secure, scalable GCP infrastructure using IaC.
• Ensure secure access, authentication, and authorisation controls.
• Automate security controls in GCP to maintain compliance (PCI DSS, 3DS).
• Lead security deployments across growing environments.
• Conduct security assessments, threat modelling, and architecture reviews.

Skills

GCP security architecture

GKE security

IAM & access control

Threat modelling

Incident response

CI/CD security

Python/Go scripting

Security best practices

SBOM / software supply chain

Vulnerability management

Tools

Terraform

Kubernetes (GKE)

Cloud IAM tooling

Security Command Center

Artifact Registry

Job description

Engine by Starling seeks a senior GCP Security Engineer to own security foundations across our Google Cloud Platform environment. You will collaborate with Information Security, Infrastructure and engineering teams to design, implement, and automate security controls, ensuring compliance with PCI DSS and 3DS.

The role is hybrid, based near London, and involves working across identity, access management, cloud security architecture, and security monitoring to keep systems secure and resilient.