Senior Cloud Security Architect - GCP & AI/ML

Compass Consulting; San Francisco (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Compass Consulting is seeking a Senior Cloud/Application Security Consultant to safeguard our advanced scientific infrastructure. You will lead secure-by-default cloud patterns in Google Cloud, and collaborate with scientists and engineers to embed security across CI/CD, AI/ML workflows, and data pipelines.

Responsibilities include threat modeling, security reviews, incident response, and ensuring ISO 27001/NIST/CIS SOC 2 compliance. Onsite presence four days a week is expected.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or related field, or equivalent experience.
• 8+ years in information security with cloud and application security expertise.
• 5+ years securing cloud applications and infrastructure, preferably GCP.

Responsibilities

• Lead design and implementation of secure-by-default cloud security controls in GCP.
• Develop security strategies for IAM, secrets management, network security, and threat detection.
• Collaborate with engineering/research teams to integrate security into CI/CD and AI/ML workflows.
• Perform threat modeling, security reviews, and vulnerability assessments for scientific apps and data pipelines.
• Support security operations with incident response, logging, monitoring, and threat detection.

Skills

Cloud security

Info security

Terraform

Docker

Kubernetes

GKE

Cloud Armor

SAST/DAST/IAST

CI/CD security

Threat modeling

Education

Bachelor’s degree in CS/Cybersecurity/Engineering

Tools

Google Cloud Platform

Security Command Center

KMS

Secret Manager

Cloud DLP

Job description

Compass Consulting is seeking a Senior Cloud/Application Security Consultant to safeguard our advanced scientific infrastructure. You will lead secure-by-default cloud patterns in Google Cloud, and collaborate with scientists and engineers to embed security across CI/CD, AI/ML workflows, and data pipelines.

Responsibilities include threat modeling, security reviews, incident response, and ensuring ISO 27001/NIST/CIS SOC 2 compliance. Onsite presence four days a week is expected.