Sr. GCP Security Engineer

Axos Business Center, Corp; Manila; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Axos is seeking a Senior GCP Security Engineer to safeguard and enhance our Google Cloud Platform environments. You will drive security architecture decisions, implement controls, and ensure workloads meet rigorous finance-industry standards.

Responsibilities include architecting GCP security across projects, managing IAM and VPC controls, and integrating security tooling into CI/CD pipelines with Terraform.

Qualifications

• 6+ years in information security with 3+ years in GCP security in enterprise or regulated environments.
• Expert-level proficiency with GCP security services: SCC, IAM, VPC Service Controls, Cloud Armor, KMS, DLP, Chronicle.
• Hands-on experience with Terraform for GCP infrastructure security automation.
• Strong command of Python for security tooling and automation.
• Knowledge of financial services compliance requirements.
• Deep understanding of cloud-native threat vectors (MITRE ATT&CK for Cloud) and detection engineering.
• Bachelor's degree in CS, Cybersecurity, or related field (or equivalent experience).

Responsibilities

• Architect and implement end-to-end GCP security controls across projects, folders, and organization-level policies.
• Design and manage IAM strategy: workforce identity federation, service account governance, Workload Identity, and organization policy constraints.
• Implement and manage VPC security controls — VPC Service Controls, Private Google Access, Cloud Armor, and firewall policies.
• Lead data security strategy and zero-trust access controls for internal applications and services hosted on GCP.
• Integrate security tooling into GCP-native CI/CD pipelines (Cloud Build, Artifact Registry) and Infrastructure as Code (Terraform).
• Conduct threat modeling and security assessments for GCP-hosted financial workloads.
• Support audit and regulatory reviews as well as monitor GCP security posture.
• Stay current with GCP releases and the evolving FSI threat landscape; communicate changes to stakeholders.

Skills

GCP Security

Terraform

Python

FS Compliance

MITRE ATT&CK

IAM & VPC

Education

Bachelor’s degree in CS/Cybersecurity

Tools

Cloud Armor

KMS

DLP

Chronicle

Artifact Registry

Terraform

Job description

About This Job

We are looking for a Senior GCP Security Engineer to protect and advance the security of our Google Cloud Platform environments. As a key member of our Cloud and AI Security team, you will serve as the GCP security authority — leading security architecture decisions, implementing controls, and ensuring our cloud workloads meet the highest standards required.

Key Responsibilities

• Architect and implement end‑to‑end GCP security controls across projects, folders, and organization‑level policies
• Design and manage IAM strategy: workforce identity federation, service account governance, Workload Identity, and organization policy constraints
• Implement and manage VPC Security Controls — VPC Service Controls, Private Google Access, Cloud Armor, and firewall policies
• Lead data security strategy as well as zero‑trust access controls for internal applications and services hosted on GCP
• Integrate security tooling into GCP‑native CI/CD pipelines (Cloud Build, Artifact Registry) and Infrastructure as Code (Terraform)
• Conduct threat modeling and security assessments for GCP‑hosted financial workloads
• Support audit and regulatory reviews as well as monitor GCP security posture
• Stay current with GCP releases and the evolving FSI threat landscape; communicate relevant changes to stakeholders

Required Qualifications

• 6+ years of information security experience, with 3+ years focused on GCP security in enterprise or regulated environments
• Expert‑level proficiency with GCP security services: SCC, IAM, VPC Service Controls, Cloud Armor, KMS, DLP, Chronicle
• Hands‑on experience with Terraform for GCP infrastructure security automation
• Strong command of Python for security tooling and automation
• Knowledge of financial services compliance requirements
• Deep understanding of cloud‑native threat vectors, attack techniques (MITRE ATT&CK for Cloud), and detection engineering
• Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience)

Preferred Qualifications

• Google Professional Cloud Security Engineer certification — strongly preferred
• Google Professional Cloud Architect certification
• Certifications: CISSP, CCSP, CISM, GCIA, or GCSA
• Experience securing Google Workspace in an enterprise financial services context
• Familiarity with Apigee API security and Cloud Endpoints for financial API gateways

Pre‑Employment Background Check, Medical, and Drug Test

All offers are contingent upon the candidate successfully passing a credit check, criminal background check, and pre‑employment medical and drug screening.

Equal Employment Opportunity

Axos is an Equal Opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants without regard to race, religious creed, color, sex (including pregnancy, breast feeding and related medical conditions), gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship status, military and veteran status, marital status, age, protected medical condition, genetic information, physical disability, mental disability, or any other protected status in accordance with all applicable federal, state, and local laws.

Job Functions and Work Environment

While performing the duties of this position, the employee is required to sit for extended periods of time. Manual dexterity and coordination are required while operating standard office equipment such as computer keyboard and mouse, calculator, telephone, copiers, etc. The work environment characteristics described here are representative of those an employee may encounter while performing the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this position.

About Axos

Axos was born digital‑first, delivering financial tools and services that allow individuals, small businesses, and companies to access and manage their money how, when, and where they want. Our team is diverse, dynamic, insightful, and independent, excited to provide technology‑driven solutions that offer unbeatable value to our customers. Axos Financial is the holding company and is publicly traded on the New York Stock Exchange under the symbol “AX” (NYSE: AX).

Additional Information

We’re a team of relentless innovators that are challenging the status quo through smart, pro‑consumer financial products and services. We started in 2000, as an online bank – when banking online was almost unthinkable. Since then, we’ve evolved to add commercial banking, commercial lending, investment, clearing, and fiduciary services to our toolbox. As modern life continues to present new challenges for clients, we step up and find creative ways to solve them.