GCP Cloud Security Lead — Architect & Defend

Astek; Riyadh; On-site; SAR 300,000 - 420,000; Full time

Job summary

Astek is seeking an experienced Senior Cloud Security Engineer to design, implement, and manage a modern Google Cloud security architecture for a leading client. You will architect and deploy CSO tooling, CSPM, DSPM, DLP, and perimeters using VPC Service Controls and Cloud Armor to protect public-facing apps.

You will lead threat detection, incident response, and threat hunting, building automated SOAR playbooks.

Qualifications

• 5+ years of cloud security experience with hands-on Google Cloud expertise.
• Proven experience deploying, configuring, and tuning CSPM, CSPM, and DSPM, and DLP.
• Strong Kubernetes/GKE security experience and container runtime security.
• Excellent written and verbal English communication; ability to collaborate with cross-functional teams.

Responsibilities

• Architect and manage Google Cloud security architecture and controls.
• Deploy and tune CSPM, DSPM, and DLP to improve posture and compliance.
• Implement VPC Service Controls and Cloud Armor for secure perimeters and protections.
• Develop and run SIEM/SOAR playbooks; lead threat detection and incident response.
• Lead investigations of complex threats and coordinate remediation with SOC and DevOps teams.
• Continuously enhance security controls, detection logic, and operational documentation.

Skills

Google Cloud Security

Cloud Security Architecture

Threat Detection & Incident Response

SOAR & SIEM Operations

English Communication

Tools

Google Cloud Security Command Center

VPC Service Controls

Cloud DLP

Kubernetes / GKE

Cloud Armor

Container Threat Detection

Chronicle / Google Cloud SecOps

Job description

Astek is seeking an experienced Senior Cloud Security Engineer to design, implement, and manage a modern Google Cloud security architecture for a leading client. You will architect and deploy CSO tooling, CSPM, DSPM, DLP, and perimeters using VPC Service Controls and Cloud Armor to protect public-facing apps.

You will lead threat detection, incident response, and threat hunting, building automated SOAR playbooks.