Cloud Security Engineer

We are seeking an experienced Cloud Security Engineer/Consultant to conduct a comprehensive data security and privacy assessment of a GCP-based architecture supporting conversational AI, virtual agents, telephony platforms, APIs, backend systems, and enterprise data integrations., The ideal candidate will have strong hands-on experience with Google Cloud Platform (GCP), cloud security architecture, data protection, IAM, API security, network security, and threat modeling. This role will identify security risks, evaluate existing controls, and provide actionable remediation recommendations., * Conduct end-to-end security architecture and data privacy assessments for GCP-based applications and integrations.

• Review data flows across GCP projects, conversational AI/virtual agents, telephony platforms, APIs, Datastore/Firestore, BigQuery, Cloud Storage, and on-premises systems.
• Identify risks related to PII exposure, authentication, authorization, encryption, secrets management, logging, monitoring, data retention, and cross-boundary data movement.
• Assess security controls for GCP IAM, service accounts, Shared VPC, network segmentation, private connectivity, interconnects, and firewalls.
• Evaluate and recommend controls for encryption in transit and at rest, including Cloud KMS and Secret Manager.
• Implement and assess Sentinel policies to enforce security and encryption standards.
• Implement or enhance database activity monitoring and blocking controls within GCP environments.
• Assess API security controls including OAuth, mTLS, token management, API gateways, and service-to-service authentication.
• Evaluate AI/GenAI-specific security risks, including prompt leakage, context exposure, model input/output security, and knowledge store access.
• Review logging, audit trails, SIEM integration, security monitoring, and incident detection capabilities.
• Perform threat modeling and architecture risk assessments.
• Produce detailed assessment reports including risk ratings, identified gaps, findings, and prioritized remediation recommendations.

• Strong experience in Cloud Security Architecture, preferably within Google Cloud Platform (GCP) environments.
• Hands-on experience with:
• GCP IAM and Service Accounts
• VPC / Shared VPC
• Cloud Run and/or GKE
• BigQuery
• Cloud Storage
• Datastore / Firestore
• Cloud KMS and Secret Manager
• Strong knowledge of data security and privacy controls for PII, PCI, or other regulated customer data.
• Experience with API security, including OAuth, mTLS, token handling, API gateways, and service-to-service authentication.
• Strong understanding of network security, private connectivity, firewalls, segmentation, and hybrid cloud connectivity.
• Experience with logging, SIEM integration, audit trails, and security monitoring.
• Hands-on experience with threat modeling, security assessments, and architecture risk reviews.
• Strong ability to document findings and communicate technical risks and remediation strategies to technical and business stakeholders., * Experience securing conversational AI, virtual agent, or GenAI platforms.
• Knowledge of AI security, data governance, model safety, and GenAI-specific risks.
• Experience with telephony, SIP integrations, contact center platforms, or voice-based applications.
• Knowledge of security and compliance frameworks such as PCI DSS, NIST, ISO 27001, SOC 2, and financial services security standards.
• Experience working in complex enterprise environments with hybrid cloud and on-premises integrations.

Ideal Candidate Profile

The ideal candidate is a senior-level cloud security professional who can independently assess complex architectures, identify data security and privacy risks, perform threat modeling, and provide practical remediation recommendations across GCP, APIs, AI platforms, telephony systems, and enterprise backend applications

Pay: $45.00 - $48.00 per hour

Expected hours: 40.0 per week

Experience:

• Cloud security: 5 years (Required)
• Google Cloud Platform: 5 years (Required)