Senior Cloud Security Engineer – Google Cloud

Astek Middle East; Riyadh; On-site; SAR 300,000 - 500,000; Full time

Job summary

Astek Middle East is seeking an experienced Senior Cloud Security Engineer to lead the design, implementation, and management of Google Cloud security architecture in Riyadh. You will oversee proactive cloud security posture management and reactive threat detection, protecting cloud infrastructure, containers, apps, and data.

You will have hands-on experience with Google Cloud SCC, SecOps/Chronicle, DSPM/DLP, and VPC Service Controls, ensuring robust security across Kubernetes and GKE

Qualifications

• 5+ years of dedicated cloud security experience.
• Hands-on experience deploying, configuring, and tuning Google Cloud Security Command Center (SCC).
• Hands-on experience with Google Cloud SecOps / Chronicle.
• Practical experience with GCP-native data protection tools, including DSPM and DLP.
• Strong understanding of Kubernetes and Google Kubernetes Engine (GKE) security, including container runtime environments.
• Experience with CSPM and misconfiguration detection.
• Experience with VPC Service Controls and cloud perimeter security.
• Experience with Google Cloud Armor and WAF security controls.
• Strong knowledge of SIEM, SOAR, threat detection, threat hunting and incident response.

Responsibilities

• Architect, deploy, configure, and manage Google Cloud Security Command Center (SCC) Enterprise as the centralized platform for cloud security visibility and operations.
• Establish and continuously improve security monitoring and operational capabilities across Google Cloud environments.
• Implement CSPM to identify cloud misconfigurations and support compliance requirements.
• Drive DSPM and DSPM initiatives to discover, classify, monitor, and protect sensitive data.
• Design and manage VPC Service Controls to establish secure perimeters around sensitive resources.
• Deploy and tune Container Threat Detection within Google Kubernetes Engine (GKE).
• Identify anomalous behavior and security threats affecting containerized workloads.
• Configure and manage Google Cloud Armor to protect public-facing applications against DDoS and exploits.
• Develop and maintain WAF rules to strengthen application and network security.
• Manage Google Cloud SecOps as the primary platform for security telemetry ingestion and threat hunting.
• Engineer and optimize SIEM capabilities to detect high-fidelity threats at scale.
• Build and maintain SOAR playbooks for automated triage and containment.
• Lead investigations into complex security threats and coordinate with the SOC team.
• Support rapid containment and resolution of active security threats.

Skills

Cloud security

Cloud security engineering

Threat detection

Kubernetes security

GKE security

Security architecture

Security analytics

Tools

Google Cloud SCC/SCC Enterprise

GCP SecOps/Chronicle

Kubernetes/GKE security

VPC Service Controls

Cloud Armor/WAF

DSPM/DLP

SIEM/SOAR

Job description

We are looking for an experienced Senior Cloud Security Engineer to lead the design, implementation, and management of our Google Cloud security architecture.

This role sits at the intersection of proactive cloud security posture management and reactive threat detection and response, leveraging Google Cloud's modern security ecosystem to protect infrastructure, containerized workloads, applications, and sensitive data.

The ideal candidate will have strong hands-on experience across Google Cloud security, Security Command Center, Google SecOps, Kubernetes/GKE security, data protection, SIEM/SOAR and network security.

Key Responsibilities

Google Cloud Security Platform

• Architect, deploy, configure, and manage Google Cloud Security Command Center (SCC) Enterprise as the centralized platform for cloud security visibility and operations.
• Establish and continuously improve security monitoring and operational capabilities across Google Cloud environments.

Cloud Security Posture & Data Protection

• Implement Cloud Security Posture Management (CSPM) to continuously identify cloud misconfigurations and support compliance requirements.
• Drive Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) initiatives to discover, classify, monitor, and protect sensitive data.
• Design and manage VPC Service Controls to establish secure perimeters around sensitive resources and reduce data-exfiltration risks.
• Implement attribute-based access controls and context-aware security policies where required.
• Deploy and tune Container Threat Detection within Google Kubernetes Engine (GKE).
• Identify anomalous behavior and security threats affecting containerized workloads.
• Configure and manage Google Cloud Armor to protect public-facing applications against DDoS attacks and web-based exploits.
• Develop and maintain appropriate WAF rules to strengthen application and network security.
• Manage Google Cloud SecOps as the primary platform for security telemetry ingestion, monitoring, investigation, and threat hunting.
• Engineer and optimize SIEM capabilities to detect high-fidelity threats at scale.
• Build and maintain SOAR playbooks to automate triage, enrichment, investigation, and rapid containment.
• Lead investigations into complex security threat cases, providing deep technical analysis and coordinating with the broader SOC team.
• Support the rapid containment and resolution of active security threats.

Requirements

• 5+ years of dedicated cloud security experience, with strong technical expertise in Google Cloud/GCP environments.
• Hands-on experience deploying, configuring, and tuning Google Cloud Security Command Center (SCC).
• Hands-on experience with Google Cloud SecOps / Chronicle.
• Practical experience with GCP-native data protection tools, including DSPM and DLP.
• Strong understanding of Kubernetes and Google Kubernetes Engine (GKE) security, including container runtime environments.
• Experience with cloud security posture management and cloud misconfiguration detection.
• Experience with VPC Service Controls and cloud perimeter security.
• Experience with Google Cloud Armor and WAF security controls.
• Strong knowledge of SIEM, SOAR, threat detection, threat hunting and incident response.