Senior Security Consultant

Atos; Phoenix (AZ); On-site; USD 120,000 - 180,000; Full time

Job summary

Atos is seeking a security architect to assess GCP-based conversational AI, telephony, API, and backend integration security. You will evaluate data flows, encryption, access controls, and monitoring across cloud and on-prem components.

The role requires hands-on cloud security experience, especially with GCP services, IAM, VPC, BigQuery, and PCI/NIST/SOC2 standards, and will produce risk-driven remediation recommendations.

Qualifications

• Strong experience in cloud security architecture, preferably Google Cloud Platform.
• Hands-on knowledge of GCP IAM, VPC/Shared VPC, BigQuery, and Datastore/Firestore.
• Experience assessing data protection controls for PII, PCI, or regulated data.
• Knowledge of API security, including OAuth, mTLS, and service-to-service authentication.
• Familiarity with logging, SIEM, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.

Responsibilities

• Assess end-to-end architecture from a data security and privacy standpoint.
• Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.
• Implement Sentinel policies for enforcing encryption standards and data access standards.
• Implement database activity monitoring and blocking rules in GCP.
• Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
• Produce findings report with risk ratings, gaps, and remediation recommendations.
• Review data flows across: GCP service projects, Virtual agents / conversational AI, API proxies, On-prem / Amex systems of record.
• Identify risks related and implement controls related to: Encryption in transit and at rest, Secrets and key management, Users and NHI authentication.
• Database activity Logging, monitoring, and auditability
• Data retention and deletion

Skills

Cloud security architecture

Google Cloud Platform

GCP IAM

VPC / Shared VPC

BigQuery

Datastore / Firestore

Data protection controls (PII/PCI)

API security (OAuth, mTLS)

Network security & hybrid cloud inters

Logging & SIEM

Threat modeling

Tools

BigQuery

Datastore/Firestore

OAuth / token handling

SIEM integration

Cloud IAM management

Job description

Security assessment of GCP-based conversational AI, telephony, API, and backend integration architecture.

Responsibilities:

• Assess the end-to-end architecture from a data security and privacy standpoint.
• Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.
• Implement Sentinel policies for enforcing encryption standards and data access standards.
• Implement database activity monitoring and blocking rules in GCP.
• Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
• Produce findings report with risk ratings, gaps, and remediation recommendations.
• Review data flows across:
• GCP service projects
• Virtual agents / conversational AI
• API proxies
• On-prem / Amex systems of record
• Identify risks related and implement controls related to:
• Encryption in transit and at rest
• Secrets and key management, Users and NHI authentication.
• Database activity Logging, monitoring, and auditability
• Data retention and deletion

Required Skills:

• Strong experience in cloud security architecture, preferably Google Cloud Platform.
• Hands-on knowledge of:
• GCP IAM
• VPC / Shared VPC
• BigQuery
• Datastore / Firestore
• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.
• Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects.
• Understanding of logging, SIEM integration, audit trails, and security monitoring.
• Experience with threat modeling and architecture risk reviews.

Preferred Skills

• Experience with conversational AI / virtual agent platforms.
• Knowledge of telephony/SIP integrations and contact center platforms.
• Experience with PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards.
• Familiarity with AI data governance, model safety, and GenAI security risks.