Principal Google Cloud Security Consultant

Coalfire Systems; Chicago (IL); On-site; USD 125,000 - 217,000; Full time

Job summary

Medium is seeking a Google Cloud Security Consultant in Chicago, IL. The successful candidate will lead security architecture design and provide strategic advice on GCP security.

The role requires deep expertise in cloud security and significant consulting experience. The consultant will work with clients on various aspects of cloud security, ensuring compliance with industrial standards and customer requirements. This position also offers remote working options with occasional travel.

Qualifications

• 8 years of security consulting experience, with at least 4 years in Google Cloud.
• Proven track record in delivering Google Cloud security architecture and posture modernization.
• Hands-on experience leading cloud security projects across multiple teams.

Responsibilities

• Lead secure Google Cloud architecture design and reviews.
• Advise customers on GCP security strategy.
• Conduct Google Cloud security posture assessments to identify risks.

Skills

Cloud security leadership

GCP security consulting

IAM

Networking

Compliance knowledge

Tools

Google Cloud services

Security Command Center

CI/CD tools

Job description

Responsibilities

• Lead secure Google Cloud architecture design and reviews across IAM, networking, workload protection, data protection, logging, monitoring, and compliance
• Advise enterprise customers on GCP security strategy aligned to business risk, regulatory requirements, and operating priorities
• Lead Google Cloud security posture assessments to identify high-impact risks, misconfigurations, control gaps, and operational weaknesses
• Advise customers on Google SecOps, Chronicle, SIEM strategy, cloud telemetry strategy, detection engineering, and SOC workflow design
• Advise customers on Wiz use cases such as CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows
• Develop executive‑ready findings, prioritized remediation roadmaps, and maturity‑based security improvement plans
• Lead Security Command Center and Security Command Center Enterprise implementation, configuration, tuning, and operationalization
• Integrate Security Command Center findings into vulnerability management, compliance, security operations, and executive risk reporting workflows
• Support SIEM modernization and migration planning, including log source rationalization, detection migration, alert tuning, and operational transition
• Help customers move from fragmented monitoring approaches into scalable, cloud‑native security operations models
• Own complex technical workstreams from discovery through delivery, including technical direction, scope, risks, and stakeholder coordination
• Translate technical security findings into clear business risks, investment priorities, and actionable recommendations for senior leaders
• Guide customer teams through secure Google Cloud design, configuration, deployment, and operational maturity decisions
• Advise on Vertex AI and AI workload security, including identity, access control, data protection, governance, logging, and monitoring
• Create architecture diagrams, assessment deliverables, roadmaps, implementation documentation, and operational runbooks
• Develop repeatable methodologies, assessment frameworks, implementation patterns, reference architectures, and reusable technical assets
• Mentor consultants and help raise the overall capability of the Google Cloud Security practice
• Provide technical leadership during client reviews, executive briefings, architecture discussions, and operational meetings
• Contribute to process improvement and automation initiatives that improve consistency, scalability, and delivery quality

Qualifications

• 8 years of security consulting experience spanning various domains with at least 4 years experience directly working as a Google Cloud consultant.
• Proven track record delivering Google Cloud security architecture, posture modernization, and operationalization outcomes from discovery through handover.
• Hands‑on leadership in cloud security projects across security, cloud, DevOps, architecture, compliance, and operations teams.
• Documented success integrating cloud‑native security platforms, SIEM, CNAPP/CSPM, logging, monitoring, vulnerability management, and SOC workflows.
• History working under regulatory or industry frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, PCI, CMMC, or similar standards.
• Demonstrable client‑facing consulting experience, maintaining professionalism and clear communication in ambiguous, high‑stakes, or fast‑paced engagements.
• 6 years of security consulting experience spanning various domains with at least 2 years experience directly working as a Google Cloud consultant.
• Deep experience designing, securing, deploying, and operationalizing Google Cloud environments.
• Strong expertise in Google Cloud security architecture, IAM, networking, logging, monitoring, data protection, workload security, and compliance‑oriented design.
• Hands‑on experience with Google Cloud security services, including Security Command Center or equivalent cloud‑native security platforms.
• Experience leading cloud security posture assessments, architecture reviews, or enterprise cloud security modernization efforts.
• Proven ability to lead complex technical engagements with multiple stakeholders, competing priorities, and enterprise‑scale environments.
• Highly adaptable consulting mindset with the ability to move between strategy, architecture, implementation, delivery leadership, and executive advisory work.
• Excellent communication, organizational, and problem‑solving skills, including the ability to brief executives and guide technical teams.
• Strong documentation skills for creating diagrams, assessment reports, roadmaps, implementation plans, written recommendations, and supporting materials.
• Critical thinking skills to balance security requirements against business objectives, operational realities, and customer maturity.
• Proven track record adapting quickly and efficiently in fast‑paced, dynamic customer environments.

Desired Certifications

• Google Cloud Professional, Cloud Security Engineer, or Professional Cloud Architect
• Google Cloud Professional Security Operations Engineer, or equivalent Google Cloud security experience

Bonus Points

• Google Cloud certifications: Professional Cloud Security Engineer, Professional Security Operations Engineer, or Professional Cloud Architect.
• Security Command Center Enterprise: Experience implementing, configuring, tuning, or operationalizing SCC Enterprise.
• Wiz experience: Experience with CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows.
• Google SecOps and SIEM modernization: Experience with Chronicle, SIEM architecture, telemetry strategy, detection engineering, or SIEM migration.
• Vertex AI security: Experience advising on AI governance, workload isolation, access controls, logging, monitoring, and secure deployment patterns.
• Practice development: Ability to create reusable methodologies, delivery accelerators, reference architectures, and practice‑level intellectual property.

Preferred Certifications or Skills (Not Required)

• Wiz
• Google SecOps/Chronicle
• SIEM migration
• Vertex AI security
• Terraform
• Other related cloud security skills

Salary

$125,000 - $217,000 a year

Work Environment

Remote working environment with up to 25% travel required.

Equal Employment Opportunity Statement

At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [e-mail].