Senior Security Engineer - GCP Security & Incident Response

Primis; United Kingdom; On-site; GBP 90,000 - 150,000; Full time

Job summary

Primis is seeking an experienced security engineer in the United Kingdom to audit and harden Google Cloud Platform environments, with emphasis on IAM least privilege, Security Command Center, and network policies. The role also builds automated guardrails into GitLab pipelines, integrating SBOM, SAST and DAST, and enforces policy as code across Terraform.

You will own the secrets lifecycle using Google Secret Manager and KMS, define logging standards, and lead host hardening and on-call incident

Qualifications

• 5+ years in security engineering, cloud engineering or SRE.
• Hands-on GCP experience with IAM, VPC, Security Center.
• Terraform and GitLab CI to embed guardrails in pipelines.
• Python/Go/Bash for internal security tooling development.
• Experience in incident response, vulnerability mgmt, WAF/DDoS mitigation.
• Designing least privilege IAM and maturing to zero-trust.

Responsibilities

• Audit, harden and monitor a GCP environment.
• Build automated guardrails into CI pipelines with SBOM, SAST/DAST.
• Own secrets lifecycle with Secret Manager and KMS.
• Define logging and observability standards for real-time detection.
• Automate host hardening and secure boot/vTPM in Shielded VMs.
• Lead MDR partner integration with internal NOC/SOC.
• Run security operations, incident response and on-call rotation.
• Lead threat modelling and architecture reviews early in development.

Skills

5+ years experience

GCP experience

Terraform

GitLab CI

Python/Go/Bash

Incident response

Zero trust IAM

Tools

Terraform

GitLab CI

Job description

Primis is seeking an experienced security engineer in the United Kingdom to audit and harden Google Cloud Platform environments, with emphasis on IAM least privilege, Security Command Center, and network policies. The role also builds automated guardrails into GitLab pipelines, integrating SBOM, SAST and DAST, and enforces policy as code across Terraform.

You will own the secrets lifecycle using Google Secret Manager and KMS, define logging standards, and lead host hardening and on-call incident