Senior Cloud Security Engineer, GCP

Role Overview

• Strengthen the BUX security posture through proactive risk management and continuous improvement
• Implement and manage Google Cloud Security Command Center Enterprise
• Configure and maintain security monitoring, threat detection and alerting
• Conduct regular security assessments and vulnerability scans
• Develop and maintain security dashboards for visibility across cloud assets
• Implement and maintain security standards across the organisation
• Define and document security policies, standards and best practices
• Establish secure development guidelines and support teams in adoption
• Ensure compliance with regulatory requirements and industry standards (SOC 2, ISO 27001, GDPR, DORA)
• Work with the platform team to integrate security into CI/CD pipelines
• Support engineering teams with security questions, issues and guidance
• Act as the security subject matter expert for development teams
• Review and advise on security aspects of system designs and architectures
• Assist with security incident investigation and response
• Provide security training and awareness programs for engineering staff
• Manage cloud security operations
• Configure and tune threat detection rules and security alerts
• Develop automated response playbooks for common security scenarios
• Monitor and respond to security findings, vulnerabilities and misconfigurations
• Coordinate with external security partners and auditors as needed
• Drive continuous security improvement
• Stay current with emerging threats, vulnerabilities and security technologies
• Evaluate and recommend security tools and solutions
• Track security metrics and report on security posture improvements
• Includes on-call duties for security incidents

Requirements

• Senior-level experience in cloud security
• Expert knowledge of Google Cloud Platform (GCP) security
• Hands-on experience with Google Cloud Security Command Center
• Strong knowledge of SIEM/SOAR platforms and security operations
• Experience with cloud security posture management
• Knowledge of threat detection, vulnerability management and incident response
• Experience with Infrastructure as Code security (Terraform, Kubernetes)
• Strong communication skills to collaborate across engineering teams, Business Security Officer and other relevant stakeholders
• Ability to translate complex security concepts for technical and non-technical audiences

Tech Stack

• Cloud
• Google Cloud Platform
• Kubernetes
• Terraform

Benefits

• International work environment
• Company pension plan
• Flexibility is at our core; we offer a hybrid work environment (1-2 days at the office)
• Working from home allowance
• Mobility benefit
• Gym membership contribution via Urban Sports
• Learning budget and full access to our learning and development platform
• A1 Dutch language course for you (and your partner)
• Delicious lunches at the office
• The possibility to work from abroad for 1 month every 12 months
• Take care of your mental and emotional well-being with unlimited appointments with psychologists or coaches through OpenUp
• Regular team gatherings and fun company events