GCP - Cloud Security Consultant

EY; Bengaluru; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

EY Bengaluru team seeks a seasoned cloud security engineer to design and implement security controls across GCP environments. You will secure Compute Engine, GKE, Cloud Storage, and databases while enforcing organizational policies and least-privilege access.

Responsibilities include monitoring Cloud Security posture, incident investigation, and pro active risk reviews to protect sensitive data workloads within GCP. Hybrid/onsite work may apply.

Qualifications

• Experience securing Google Cloud Platform (GCP) environments.
• Familiarity with CIS GCP Benchmarks and security best practices.
• Knowledge of IAM design, RBAC, and least-privilege principles.

Responsibilities

• Design and implement security controls across GCP environments.
• Secure Compute Engine, GKE, Cloud Storage, Cloud SQL, BigQuery, and VPC networks.
• Implement security guardrails using Organizational Policies and Resource Hierarchy.
• Monitor cloud security posture with Security Command Center, Cloud Logging, and Cloud Monitoring.
• Investigate security events and protect data workloads across GCP services.

Skills

Infrastructure Security

Data Security

Application Security

Cloud Monitoring

Tools

GKE

IAM

Cloud Logging

Cloud Monitoring

Security Command Center

Job description

Location: Bangalore

Primary Skills

• Infrastructure Security (GKE, Networks/VPC, GCP Cloud Services, Endpoints Protection)
• Data Security (Data Protection, Encryption, DLP)
• Application Security (Secure SDLC, Security Assessments, Vulnerability Management)
• Cloud Infra Monitoring and Risk Reviews

Roles & Responsibilities

• Design and implement security controls across GCP environments.
• Secure Compute Engine, GKE, Cloud Storage, Cloud SQL, BigQuery, and VPC networks.
• Implement security guardrails using Organizational Policies and Resource Hierarchy.
• Ensure compliance with CIS GCP Benchmarks and security best practices.
• Design and implementation of IAM solutions.
• Access governance, RBAC, least-privilege principles.
• Policy creation, enforcement, and compliance management.
• Ensure compliance with NIST/CIS GCP Benchmarks and security best practices.
• Experience with SSO, MFA, Privileged Access Management (PAM).
• Monitor cloud security posture using Security Command Center, Cloud Logging, Cloud Monitoring in GCP.
• Investigate security events and suspicious activities.
• Implement data protection controls across GCP service. Secure sensitive data workloads and storage services.
• Optimize security monitoring and reduce false positives
• Develop security standards, policies, and operational procedures.
• Conduct security posture assessments and risk reviews.