Senior Google Cloud Security & Threat Defense Lead

Astek Middle East; Riyadh; On-site; SAR 300,000 - 500,000; Full time

Job summary

Astek Middle East is seeking an experienced Senior Cloud Security Engineer to lead the design, implementation, and management of Google Cloud security architecture in Riyadh. You will oversee proactive cloud security posture management and reactive threat detection, protecting cloud infrastructure, containers, apps, and data.

You will have hands-on experience with Google Cloud SCC, SecOps/Chronicle, DSPM/DLP, and VPC Service Controls, ensuring robust security across Kubernetes and GKE

Qualifications

• 5+ years of dedicated cloud security experience.
• Hands-on experience deploying, configuring, and tuning Google Cloud Security Command Center (SCC).
• Hands-on experience with Google Cloud SecOps / Chronicle.
• Practical experience with GCP-native data protection tools, including DSPM and DLP.
• Strong understanding of Kubernetes and Google Kubernetes Engine (GKE) security, including container runtime environments.
• Experience with CSPM and misconfiguration detection.
• Experience with VPC Service Controls and cloud perimeter security.
• Experience with Google Cloud Armor and WAF security controls.
• Strong knowledge of SIEM, SOAR, threat detection, threat hunting and incident response.

Responsibilities

• Architect, deploy, configure, and manage Google Cloud Security Command Center (SCC) Enterprise as the centralized platform for cloud security visibility and operations.
• Establish and continuously improve security monitoring and operational capabilities across Google Cloud environments.
• Implement CSPM to identify cloud misconfigurations and support compliance requirements.
• Drive DSPM and DSPM initiatives to discover, classify, monitor, and protect sensitive data.
• Design and manage VPC Service Controls to establish secure perimeters around sensitive resources.
• Deploy and tune Container Threat Detection within Google Kubernetes Engine (GKE).
• Identify anomalous behavior and security threats affecting containerized workloads.
• Configure and manage Google Cloud Armor to protect public-facing applications against DDoS and exploits.
• Develop and maintain WAF rules to strengthen application and network security.
• Manage Google Cloud SecOps as the primary platform for security telemetry ingestion and threat hunting.
• Engineer and optimize SIEM capabilities to detect high-fidelity threats at scale.
• Build and maintain SOAR playbooks for automated triage and containment.
• Lead investigations into complex security threats and coordinate with the SOC team.
• Support rapid containment and resolution of active security threats.

Skills

Cloud security

Cloud security engineering

Threat detection

Kubernetes security

GKE security

Security architecture

Security analytics

Tools

Google Cloud SCC/SCC Enterprise

GCP SecOps/Chronicle

Kubernetes/GKE security

VPC Service Controls

Cloud Armor/WAF

DSPM/DLP

SIEM/SOAR

Job description

Astek Middle East is seeking an experienced Senior Cloud Security Engineer to lead the design, implementation, and management of Google Cloud security architecture in Riyadh. You will oversee proactive cloud security posture management and reactive threat detection, protecting cloud infrastructure, containers, apps, and data.

You will have hands-on experience with Google Cloud SCC, SecOps/Chronicle, DSPM/DLP, and VPC Service Controls, ensuring robust security across Kubernetes and GKE