GCP Vulnerability Engineer

Job Description

As a Security Engineer you will be a part of a smart cross-functional team delivering digital business transformation solutions to our clients. This position entails an individual contributor role focused on Security Architecture and Threat Modeling, encompassing governance, evaluation of public cloud services, and conducting security reviews for Public Cloud Providers. Collaboration and partnership with Engineering, Information Security, Program Management, and Development teams are essential. The candidate will conduct technical architecture reviews to pinpoint security opportunities, identify exploitable threats, and propose mitigation strategies.

Qualifications

Candidates should have knowledge of the tools and processes to provide operational security support to our cloud ecosystem. Pre-requisites for this position are at least a bachelor’s degree with 3 - 5 years of experience on most of the following areas: 

• Proven offensive security-oriented mindset (vulnerability assessments, infrastructure & application pen testing, threat modeling, threat actor emulation) 
• Hands-on experience with GCP
• Excellent understanding of Cloud security concepts/best practices 
• Familiarity with securing containers and container orchestration frameworks (such as Kubernetes – GKE) 
• Deep Understanding of MITRE ATT&CK and attacker TTPs 
• Programming/scripting languages a plus (Python preferred, but not required) 
• Infrastructure as Code knowledge a plus (Terraform) 
• Ability to deliver presentations to senior leaders and peer organizations in both a technical and non-technical manner.

Certifications:
• Cloud security certifications: GCP Professional Cloud Security Engineer, etc. 
• Container/Kubernetes certifications: CKA, CKAD, CKS, etc.
• Other security certifications: OSCP, OSCE, GXPN, GPEN, GCIH, GWAPT, etc.