Lead Cloud Security Engineer - GCP & Data Protection

AppLab Systems, Inc; Texas; On-site; USD 120,000 - 160,000; Full time

Job summary

AppLab Systems, Inc. seeks a Security Architect to assess the end-to-end architecture of a GCP-based conversational AI with telephony, API proxies, and backend integration. You will review data flows, protect data, and deliver risk ratings with remediation suggestions.

The role emphasizes IAM, VPC, BigQuery, Datastore/Firestore, encryption, logging, and AI-specific risks, with responsibilities to produce a findings report and enforce security controls.

Qualifications

• Experience in cloud security architecture, preferably Google Cloud Platform (GCP).
• Knowledge of API security (OAuth, mTLS, token handling, gateways, service-to-service authentication).
• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Familiarity with logging, monitoring, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.

Responsibilities

• Assess the end-to-end architecture from a data security and privacy standpoint.
• Review data flows across GCP services, telephony, APIs, and backend systems.
• Identify risks related to customer data exposure, PII handling, encryption, logging, and data retention.
• Review security controls for GCP Shared VPC, IAM, and network segmentation.
• Implement Sentinel policies to enforce encryption standards and DB activity monitoring.
• Assess AI-specific risks including prompt leakage and model input/output handling.
• Produce findings report with risk ratings, gaps, and remediation recommendations.

Skills

Cloud security

GCP

IAM

Network security

Threat modeling

Data protection

API security

Tools

GCP IAM

VPC / Shared VPC

BigQuery

Datastore/Firestore

OAuth

mTLS

SIEM

Job description

AppLab Systems, Inc. seeks a Security Architect to assess the end-to-end architecture of a GCP-based conversational AI with telephony, API proxies, and backend integration. You will review data flows, protect data, and deliver risk ratings with remediation suggestions.

The role emphasizes IAM, VPC, BigQuery, Datastore/Firestore, encryption, logging, and AI-specific risks, with responsibilities to produce a findings report and enforce security controls.