Cloud Security Engineer(GCP)

METRO Global Solution Center IN; Maharashtra; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

METRO Global Solution Center is seeking a Cloud Security Engineer to evolve cloud security guidelines and implement security controls across development lifecycles in our Pune, India operations.

You will collaborate with METRO's Corporate Information Security to drive secure practices, including threat modelling, workload protection, and data management. Prior experience with Terraform and cloud platforms is essential for success.

Qualifications

• Cloud security experience across major cloud platforms.
• Infrastructure as Code experience including Terraform.
• Container security including image hardening and runtime protection.
• Designing and implementing security controls across build, test, and deployment.

Responsibilities

• Participate in evolving guidelines and standards for cloud security across workloads and infrastructure.
• Engage with METRO Corporate Information Security to define best practices and align working methods.
• Support CI/CD pipelines and infrastructure operations with security by default.
• Assist platform and business teams in implementing technical and organizational controls for compliance.
• Help address vulnerabilities and audit findings with METRO engineering teams.
• Support remediation of security alerts to reduce exposure across METRO systems.

Skills

Cloud security

Threat modelling

CI/CD security

Security controls

Platform security

Tools

Terraform

Job description

Metro Global Solution Center (MGSC) is internal solution partner for METRO, a €30 Billion international wholesaler with operations in 32 countries through 625 stores & a team of 91,000 people globally. Metro operates in a further 10 countries with its Food Service Distribution (FSD) business, and it is thus active in a total of 34 countries. MGSC, location wise is present in Pune (India), Düsseldorf (Germany) and Szczecin (Poland). We provide Finance, HR, Strategy, IT & Business operations support to 31 countries, speak 24+ languages and process over 18,000 transactions a day. We are setting tomorrow’s standards for customer focus, digital solutions, and sustainable business models. For over 10 years, we have been providing services and solutions from our two locations in Pune and Szczecin. This has allowed us to gain extensive experience in how we can best serve our internal customers with high quality and passion. We believe that we can add value, drive efficiency, and satisfy our customers.

Website: https://www.metro-gsc.in

Company Size: 600-650

Headquarters: Pune, Maharashtra, India

Type: Privately Held

Inception: 2011

Job Description

• Participate in the evolution of relevant guidelines and standards related to one or all major cloud platforms including workload protection, networking & infrastructure security, threat modelling, data management and any relevant areas for software and infrastructure development.
• Participate actively in the engineer community led by METRO Corporate Information Security to define best practices, align way-of-working, prioritize and execute on the needed activities across development and agile lifecycles.
• Contribute to security by default by helping to implement defined controls in CI/CD pipelines, and infrastructure operations
• Actively support platform and business teams to implement defined technical and organization measures related to security and privacy and to IT controls to ensure compliance with applicable laws and internal regulations.
• Actively support engineering teams across METRO to address identified vulnerabilities and audit findings
• Support cyber defense, enterprise architects and software engineer teams in remediation of identified risks or security alerts and vulnerabilities to reduce METRO’s exposure to such vulnerabilities and risks.

Qualifications

Cloud security experience in one, or more of the following:

• Oracle, Google cloud including implementing and evaluating security baselines and best practices across native services.
• Experience in infrastructure as Code and Policy as Code including tooling like Terraform and equivalent frameworks.
• Experiencing driving container security best practices including image hardening, admission control, and run-time protection
• Designing and implementing controls across cloud platforms ensuring security in build, test, and deployment.
• Cloud and platform networking security, including experience managing and configuring firewalls load balancers, segmentation, and identity driven access models.
• Building, operating, and ensuring the successful integration of security logging across cloud infrastructure and applications.
• Experience securing complex enterprise platforms such as SAP and custom develop applications.

And:

• Experience with LLMs, AI, and agentic coding platforms such as Github Co-pilot, Gemini, or Claude Code.
• Proven experience as a security subject-matter expert, mentoring and raising awareness to security mandates.