Cloud Security Engineer (GCP) - DevSecOps Focus

Ulta Beauty; Bolingbrook (IL); Hybrid; USD 88,000 - 130,000; Full time

Benefits offered by this job

Health benefits

Dental benefits

Vision benefits

Life insurance

Disability insurance

Job summary

Ulta Beauty is seeking a Cloud Security Engineer to safeguard our cloud platforms and modern application environments. You will implement security controls across GCP and Azure, support IAM, encryption, and data protection, and work with DevSecOps to weave security into CI/CD pipelines.

In this hybrid role, you’ll collaborate with infrastructure, platform, and software teams to enable secure innovation, monitor security events, and respond to incidents with strong analytical and communication

Qualifications

• 3+ years in cloud security or related field.
• Hands-on with Google Cloud Platform security services.
• Experience securing cloud workloads, identities, and data.
• Familiarity with monitoring, vulnerability management, and incident response.
• Strong IAM, encryption, logging, and secure deployment knowledge.
• Experience with DevSecOps and secure software supply chain.

Responsibilities

• Implement and maintain cloud security controls in GCP and Azure.
• Design and enforce guardrails and baseline configurations.
• Manage IAM and zero-trust initiatives.
• Secure containers and workloads, including image scanning.
• Integrate security into CI/CD pipelines.
• Collaborate with cross-functional teams to balance security and business needs.
• Monitor alerts and investigate incidents; perform RCA.

Skills

Cloud security

GCP security

IAM & zero trust

DevSecOps

CI/CD security

Threat detection

Incident response

Security automation

Education

Bachelor's degree in CS/Engineering

Tools

GCP

Azure

Kubernetes

Terraform

BigQuery

Job description

Ulta Beauty is seeking a Cloud Security Engineer to safeguard our cloud platforms and modern application environments. You will implement security controls across GCP and Azure, support IAM, encryption, and data protection, and work with DevSecOps to weave security into CI/CD pipelines.

In this hybrid role, you’ll collaborate with infrastructure, platform, and software teams to enable secure innovation, monitor security events, and respond to incidents with strong analytical and communication