GCP Cloud Security Engineer

Job Description : GCP Cloud Security Engineer

Location :

Bangalore (Hybrid – 3 days in-office)

Experience Required :

5+ years in cloud security, specifically with GCP

Role Overview

We are looking for a passionate GCP Cloud Security Engineer to enhance our Network Security and Technology Risk team in Bangalore. You will be central to securing our Google Cloud infrastructure—ensuring compliance, enabling secure deployments, and building automation to scale security measures effectively. Your expertise will help navigate evolving cloud threats while promoting DevSecOps across the organization. A similar role is outlined in the Google Cloud Professional Cloud Security Engineer certification description.

Key Responsibilities

Architect, implement, and manage security controls in Google Cloud environments using best practices from frameworks such as CIS, NIST, and Google’s Well-Architected.

Integrate GCP security into CI / CD pipelines via DevSecOps—employ SAST / DAST tools and enforce policy-as-code.

Identify, assess, and remediate misconfigurations; collaborate with engineering teams for corrective actions.

Manage infrastructure-as-code using Terraform (or Deployment Manager), incorporating guardrails and policy enforcement using tools like Terraform Sentinel.

Conduct ongoing vulnerability assessments and reports using CSPM, Security Command Center, and other GCP security tools.

Automate security tasks using scripting languages (Python, Go, Bash) to improve repeatability and efficiency.

Maintain and audit IAM policies and roles, ensuring alignment with least privilege principles.

Lead incident response activities for security events in GCP; conduct routine compliance assessments and track remediation tasks.

Stay current with cloud security innovations, zero-trust architectures, AI-powered tools, and associated best practices.

Qualifications & Expertise

Experience & Certifications

5+ years of cloud security experience with a substantial focus on GCP.

Preferred certifications :

Google Professional Cloud Security Engineer

Google Professional Cloud Architect or DevOps Engineer

Technical Skills

Infrastructure-as-Code :

Experience with Terraform (and Sentinel), Google Deployment Manager.

DevSecOps :

CI / CD pipeline integration, policy-as-code, security scanning (SAST / DAST).

Security Frameworks & Tools :

Familiarity with CIS, NIST, ISO 27001, Security Command Center, CSPM.

Scripting :

Proficient in Python, Go, or Bash.

IAM & Networking :

Strong grasp of GCP IAM, networking, and segmentation principles.

Threat Detection & Response :

Skills in incident response, vulnerability scanning, and remediation tracking.

Soft Skills

Sharp analytical and critical thinking capabilities.

Excellent collaboration skills—experience working with DevOps, SecOps, and development teams.

Strong communication skills to present security insights and recommendations to technical and non-technical stakeholders