Senior Cloud Security Engineer (GCP)

Astek; Riyadh; On-site; SAR 300,000 - 420,000; Full time

Job summary

Astek is seeking an experienced Senior Cloud Security Engineer to design, implement, and manage a modern Google Cloud security architecture for a leading client. You will architect and deploy CSO tooling, CSPM, DSPM, DLP, and perimeters using VPC Service Controls and Cloud Armor to protect public-facing apps.

You will lead threat detection, incident response, and threat hunting, building automated SOAR playbooks.

Qualifications

• 5+ years of cloud security experience with hands-on Google Cloud expertise.
• Proven experience deploying, configuring, and tuning CSPM, CSPM, and DSPM, and DLP.
• Strong Kubernetes/GKE security experience and container runtime security.
• Excellent written and verbal English communication; ability to collaborate with cross-functional teams.

Responsibilities

• Architect and manage Google Cloud security architecture and controls.
• Deploy and tune CSPM, DSPM, and DLP to improve posture and compliance.
• Implement VPC Service Controls and Cloud Armor for secure perimeters and protections.
• Develop and run SIEM/SOAR playbooks; lead threat detection and incident response.
• Lead investigations of complex threats and coordinate remediation with SOC and DevOps teams.
• Continuously enhance security controls, detection logic, and operational documentation.

Skills

Google Cloud Security

Cloud Security Architecture

Threat Detection & Incident Response

SOAR & SIEM Operations

English Communication

Tools

Google Cloud Security Command Center

VPC Service Controls

Cloud DLP

Kubernetes / GKE

Cloud Armor

Container Threat Detection

Chronicle / Google Cloud SecOps

Job description

For one of our clients, we are looking for an experienced Senior Cloud Security Engineer to lead the design, implementation, and management of a modern Google Cloud security architecture.

Key Responsibilities

• Architect, deploy, and manage Google Cloud Security Command Center Enterprise as the centralized platform for cloud security visibility and operations.
• Implement and manage Cloud Security Posture Management (CSPM) to identify misconfigurations, improve security posture, and support compliance requirements.
• Develop the organization’s Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) strategy to discover, classify, monitor, and protect sensitive data across Google Cloud environments.
• Design and manage VPC Service Controls to establish secure perimeters around sensitive resources and reduce data exfiltration risks.
• Deploy and tune Container Threat Detection within Google Kubernetes Engine (GKE) to identify anomalous activity and protect containerized workloads.
• Manage Google Cloud SecOps, formerly Chronicle, as the primary platform for security telemetry ingestion, detection engineering, and threat hunting.
• Configure and manage Google Cloud Armor, including WAF rules and DDoS protection, for public-facing applications and services.
• Engineer and optimize SIEM capabilities to detect high-fidelity threats at scale.
• Build and maintain SOAR playbooks for automated alert triage, enrichment, investigation, and containment.
• Lead the investigation and resolution of complex security threat cases.
• Perform deep technical analysis of active threats and collaborate with the SOC and wider technology teams on remediation.
• Continuously improve cloud security controls, detection logic, response processes, and operational documentation.

Requirements

• At least 5 years of experience in cloud security, with strong hands-on expertise in Google Cloud environments.
• Proven experience deploying, configuring, and tuning:
• Google Cloud Security Command Center
• VPC Service Controls
• Google Cloud DLP and related data protection tools
• Strong understanding of Google Cloud security architecture, IAM, networking, logging, monitoring, and security controls.
• Practical experience securing Kubernetes and Google Kubernetes Engine (GKE) environments.
• Knowledge of container runtime security, container threat detection, and workload protection.
• Experience with SIEM, SOAR, threat detection, threat hunting, and incident response.
• Ability to design and automate security operations workflows and response playbooks.
• Strong analytical and problem-solving skills, with the ability to investigate complex security incidents.
• Excellent communication skills and the ability to work effectively with security, infrastructure, DevOps, and SOC teams.
• Professional working proficiency in English.

Preferred Qualifications

• Experience with security and compliance frameworks such as ISO 27001, NIST, CIS, or PCI DSS.
• Experience with infrastructure-as-code and security automation.
• Familiarity with DevSecOps practices and cloud-native application security.
• Experience operating security platforms in large-scale or highly regulated environments.