Cloud Security Engineer - GCP

ExecuSource; Marietta (GA); Hybrid; USD 115,000 - 155,000; Full time

Job summary

ExecuSource in Marietta, GA is seeking a Sr. GCP Cloud Security Engineer to join as a builder-minded architect. This role is project-focused and high-impact, requiring hands-on design, code, and automation across a multi-cloud footprint.

You will own CNAPP, optimize security across GCP (90–95%), and partner with software engineering and R&D to embed security in CI/CD, IaC, and application code. This is a hybrid, full-time role with strong growth.

Qualifications

• IT and security foundation with 7+ years in IT and 5+ years in cybersecurity.
• 4+ years hands-on cloud security experience in GCP.
• 3+ years with automation and scripting using Python, Go, PowerShell or Bash.
• 3+ years identifying and remediating cloud vulnerabilities.
• Experience working in a software product company with R&D and engineering teams.

Responsibilities

• Architect and build cloud-native security controls and Python automation.
• Manage CNAPP and drive architectural changes across Google Cloud.
• Evaluate GCP components to identify risks and propose solutions.
• Partner with developers, DevOps, and R&D to embed security in CI/CD.
• Own cloud security projects from problem definition to delivery.
• Maintain security configurations across GCP and multi-cloud environments (Azure, AWS, Oracle).

Skills

IT & Security Foundation

Deep GCP Expertise

Hands-on Scripting/Coding

Vulnerability & Risk Reduction

Software/Product Environment

Education

Bachelor’s degree in Computer Science, Information Systems, or equivalent

Job description

Role: Sr. GCP Cloud Security Engineer

Location: Marietta, GA – Hybrid

Full-Time/Perm

Salary: $135,000

POSITION OVERVIEW

We are seeking a senior, highly technical Cloud Security Engineer / Architect-minded Builder to join our team. This is a project-focused, high-impact role designed for an engineer who can look across an enterprise cloud footprint, proactively identify architectural risks, design custom solutions, write automated tooling, and drive projects through execution.

Our enterprise environment operates across multiple cloud providers, with Google Cloud Platform (GCP) representing 90–95% of our infrastructure. This is not an operational/ticket-remediation or administration role; we are looking for a true technical builder and thought leader who can build custom security controls, optimize CNAPP environments, and partner directly with software engineering and R&D teams.

PRIMARY RESPONSIBILITIES

• Architect & Build Custom Security Controls: Design, code, and deploy cloud-native security controls, custom bots, and Python automation from the ground up to reduce risk across GCP and multi-cloud environments.
• CNAPP Ownership & Risk Reduction: Manage and optimize our Cloud-Native Application Protection Platform (CNAPP), using findings to drive tangible architectural and configuration changes across Google Cloud.
• Proactive Security Architecture: Actively evaluate cloud infrastructure (including GKE, Cloud Armor, IAM, Cloud Run, and Load Balancers) to identify hidden risks, present strategic solutions to leadership, and drive implementation.
• DevSecOps & Software Engineering Alignment: Partner directly with software developers, DevOps, and R&D teams to embed security controls across the CI/CD pipeline, infrastructure-as-code, and application code.
• End-to-End Project Execution: Own cloud security projects from initial problem identification through technical design, coding, cross-functional alignment, and final delivery.
• Multi-Cloud Architecture: Maintain oversight and secure configurations across GCP, with secondary support for Azure, AWS, and Oracle Cloud environments.

REQUIRED SKILLS & QUALIFICATIONS

Experience Requirements

• IT & Security Foundation: 7+ years of total IT experience, including 5+ years in dedicated cybersecurity.
• Deep GCP Expertise: 4+ years of hands-on cloud security experience, with demonstrated technical depth in Google Cloud Platform (GCP) architecture.
• Hands-on Scripting/Coding: 3+ years of experience developing automation, scripts, custom controls, or tooling using Python (preferred), Go, PowerShell, or Bash.
• Vulnerability & Risk Reduction: 3+ years identifying, prioritizing, and remediating complex cloud vulnerabilities.
• Software/Product Environment Experience: Proven track record working in a software product company alongside R&D and engineering teams.

Technical Capabilities

• GCP Security Stack: Hands-on experience with Security Command Center, GKE, Cloud Armor, Cloud Functions, Cloud Run, IAM, and Cloud Load Balancers.
• Container & Infrastructure Security: Experience securing Kubernetes (GKE), Docker, and Infrastructure-as-Code (Terraform, CloudFormation).
• CNAPP Management: Experience operating CNAPP or enterprise CSPM/CWPP tools to drive security posture improvements.
• Standards & Compliance: Solid understanding of NIST, CIS Benchmarks, ISO 27001, and cloud networking/encryption standards.

PREFERRED CERTIFICATIONS & EDUCATION

• Education: Bachelor’s degree in Computer Science, Information Systems, or equivalent practical experience.
• Preferred Certifications:
  • Google Professional Cloud Security Engineer
  • Google Professional Cloud Architect
  • Certified Information Systems Security Professional (CISSP)
• Additional Plus: AWS Certified Security – Specialty, Microsoft Azure Security Engineer Associate, CEH, or Security+.

CAREER OPPORTUNITY & GROWTH

This position provides high visibility across both technical and executive leadership. For exceptional candidates who demonstrate technical ownership and project success, there is a clear growth trajectory to transition into a Lead Cloud Security Engineer role within 12–18 months.