GCP CLoud Security Engineer

Acunor is seeking an experienced Security Engineer to secure, monitor, and support enterprise Google Cloud Platform environments. The role focuses on implementing cloud security controls, managing identity and access, investigating incidents, remediating vulnerabilities and misconfigurations, and strengthening GCP security posture.

Responsibilities:

• Implement, configure, and manage security controls across enterprise Google Cloud Platform (GCP) environments
• Secure GCP services including IAM, service accounts, workload identity, networking, logging, monitoring, encryption, and security policies
• Implement and maintain least-privilege access, RBAC, service-account governance, workload identity, and privileged-access controls
• Monitor GCP environments for security threats, suspicious activities, vulnerabilities, and configuration issues
• Perform end-to-end Incident Response , including investigation, triage, containment, remediation, root-cause analysis, and post-incident activities
• Analyze cloud security logs, alerts, and telemetry to identify and investigate potential security incidents
• Identify and remediate cloud vulnerabilities, security misconfigurations, excessive permissions, and security-control gaps
• Work with Google Security Command Center, Cloud Logging, Cloud Monitoring, and Organization Policies
• Implement security controls for VPCs, firewall policies, private connectivity, network segmentation, and workload protection
• Conduct cloud security assessments, configuration reviews, threat analysis, and remediation activities
• Collaborate with Cloud, DevOps, Infrastructure, Application, and Security Operations teams
• Support security automation and integration of cloud security controls into engineering and operational processes
• Participate in security investigations and provide technical recommendations to prevent recurrence
• Support enterprise identity and privileged-access integrations using technologies such as Okta and CyberArk

Requirements:

• 8+ years of overall IT/Security experience , with strong recent experience in Cloud Security Engineering
• Strong hands-on experience securing Google Cloud Platform (GCP) environments
• Deep understanding of GCP IAM, service accounts, workload identity, Organization Policies, Security Command Center, Cloud Logging, and Cloud Monitoring
• Hands-on cloud network security experience including VPCs, firewall rules/policies, private connectivity, and network segmentation
• Strong hands-on Incident Response experience within cloud or enterprise environments
• Experience investigating security alerts, analyzing logs, determining root causes, and implementing remediation
• Strong understanding of IAM, least privilege, RBAC, federation, privileged access, encryption, and secrets management
• Experience identifying and remediating cloud security vulnerabilities and misconfigurations
• Understanding of Zero Trust and cloud security architecture principles
• Ability to collaborate with technical teams during security incidents and drive issues through resolution
• Hands-on Okta experience including SSO, MFA, federation, SAML/OIDC, identity integrations, and user lifecycle management
• Experience with CyberArk for Privileged Access Management (PAM), credential vaulting, privileged-account management, and access controls
• Experience with SIEM/SOAR platforms and security monitoring
• Experience with Terraform / Infrastructure-as-Code (IaC) and cloud security automation
• Scripting experience using Python, PowerShell, Bash , or similar technologies
• Experience securing Kubernetes/GKE environments
• Knowledge of security standards and frameworks such as NIST, CIS Benchmarks, SOC 2, and ISO 27001
• Relevant certifications in GCP, Cloud Security, CISSP, CyberArk, or Okta