Cloud Security Engineer lead (GCP Cloud)

AppLab Systems, Inc; Texas; On-site; USD 120,000 - 160,000; Full time

Job summary

AppLab Systems, Inc. seeks a Security Architect to assess the end-to-end architecture of a GCP-based conversational AI with telephony, API proxies, and backend integration. You will review data flows, protect data, and deliver risk ratings with remediation suggestions.

The role emphasizes IAM, VPC, BigQuery, Datastore/Firestore, encryption, logging, and AI-specific risks, with responsibilities to produce a findings report and enforce security controls.

Qualifications

• Experience in cloud security architecture, preferably Google Cloud Platform (GCP).
• Knowledge of API security (OAuth, mTLS, token handling, gateways, service-to-service authentication).
• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Familiarity with logging, monitoring, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.

Responsibilities

• Assess the end-to-end architecture from a data security and privacy standpoint.
• Review data flows across GCP services, telephony, APIs, and backend systems.
• Identify risks related to customer data exposure, PII handling, encryption, logging, and data retention.
• Review security controls for GCP Shared VPC, IAM, and network segmentation.
• Implement Sentinel policies to enforce encryption standards and DB activity monitoring.
• Assess AI-specific risks including prompt leakage and model input/output handling.
• Produce findings report with risk ratings, gaps, and remediation recommendations.

Skills

Cloud security

GCP

IAM

Network security

Threat modeling

Data protection

API security

Tools

GCP IAM

VPC / Shared VPC

BigQuery

Datastore/Firestore

OAuth

mTLS

SIEM

Job description

Focus: Security assessment of GCP-based conversational AI, telephony, API, and backend integration architecture.

Responsibilities:

Assess the end-to-end architecture from a data security and privacy standpoint.

Review data flows across:

• GCP service projects Virtual agents /conversational AI, Telephony platforms, API proxies, Datastore, BigQuery, Cloud Storage, On-prem systems of record

Identify risks related to:

• Customer data exposure
• PII handling
• Authentication and authorization
• Encryption in transit and at rest
• Secrets and key management
• Logging, monitoring, and auditability
• Data retention and deletion
• Cross-boundary data movement

Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.

Implement Sentinel policies for enforcing encryption standards.

Implement database activity monitoring and blocking rules in GCP.

Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.

Produce findings report with risk ratings, gaps, and remediation recommendations.

Required Skills:

• Strong experience in cloud security architecture, preferably Google Cloud Platform.

Hands-on knowledge of:

• GCP IAM
• VPC / Shared VPC
• BigQuery
• Datastore / Firestore
• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.
• Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects.
• Understanding of logging, SIEM integration, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.