The Role
Audit, harden and monitor a GCP environment, covering Security Command Center, IAM least privilege, Cloud Armor, KMS encryption, OS Login and GKE network policies
Build automated security guardrails into GitLab pipelines, integrating SBOM, SAST and DAST scanning and enforcing policy as code across Terraform
Own the end to end secrets lifecycle using Google Secret Manager and KMS, including rotation and access policies
Define logging and observability standards, including VPC flow logs, to support real time incident detection and reporting
Implement and automate host hardening, including Shielded VM configuration with secure boot and vTPM
Act as the technical lead with the MDR partner, integrating with internal NOC and SOC operations
Lead security operations and incident response, including a structured out of hours on call rotation for high severity threats (compensated separately via callout pay)
Run regular threat modelling sessions and architecture reviews to catch risks early in the development lifecycle
Skills Needed
- 5+ years in security engineering, cloud engineering or SRE within a modern cloud environment
- Deep hands on GCP experience (IAM, Workload Identity, VPC, Org Policy, Security Command Center)
- Strong containerisation skills (Docker, Kubernetes)
- Strong Terraform and GitLab CI experience, embedding automated security guardrails into pipelines
- Scripting or development ability in Python, Go or Bash for building internal security tools
- Track record owning incident response, detection engineering, vulnerability management and WAF/DDoS mitigation
- Practical experience designing least privilege IAM and maturing environments toward zero trust
Research indicates that men will apply to a role when they meet only 50–60% of the requirements, while women and other underrepresented groups often look for a 90–100% match.
If this role excites you but you don't tick every single box, please still apply. We'd love to hear from you.