Cybersecurity engineer
Sobre o projeto e a vaga
Cybersecurity engineer Critical Position Google $5,800per month English: C1 | Advanced - Duration: 6 Months Dedication: Both Vacancies: 1 All seniorities & countries: Senior, senior level 2, Architect, software designer, Argentina, Chile, Brazil, Colombia, Mexico Project description As a Security SME, you will be responsible for leading and delivering comprehensive security posture reviews for Google Cloud environments. This role involves evaluating customer configurations and architecture, identifying risks, and providing actionable recommendations to enhance security and build customer confidence in their Google Cloud platform. Responsibilities: ● Conduct in-depth reviews and evaluations of Google Cloud configurations and architecture to assess security posture. ● Identify and analyze security misconfigurations, poor security practices, and potential vulnerabilities within customer GCP environments. ● Develop and present tailored recommendations and a strategic roadmap to strengthen security controls and facilitate continuous security improvement. ● Provide customers with deeper insight and situational awareness into how users are consuming GCP, ensuring alignment with security guidelines and best practices. ● Collaborate with customers to reduce security risks and improve their overall confidence in the security of their Google Cloud platform. Minimum Qualifications: ● Proven expertise in Google Cloud security services, configurations, and architectural best practices. ● Demonstrated ability to perform comprehensive security assessments and identify security gaps. ● Experience in developing practical and actionable security recommendations and strategic roadmaps. ● Strong understanding of cloud security principles, compliance frameworks, and industry best practices. ● Excellent communication and presentation skills, with the ability to articulate complex security concepts to technical and non-technical audiences. Preferred Qualifications: ● Experience working with Enterprise, Select, or Partner segments. ● Familiarity with diverse customer maturity levels, from Early Stage to Mature cloud adoption. ● Experience delivering security consulting services across various regions (e.g., LATAM, NORTHAM,JAPAC, EMEA). ● Google Cloud security certifications Main tasks As a Security SME, you will be responsible for leading and delivering comprehensive security posture reviews for Google Cloud environments. This role involves evaluating customer configurations and architecture, identifying risks, and providing actionable recommendations to enhance security and build customer confidence in their Google Cloud platform. Responsibilities: ● Conduct in-depth reviews and evaluations of Google Cloud configurations and architecture to assess security posture. ● Identify and analyze security misconfigurations, poor security practices, and potential vulnerabilities within customer GCP environments. ● Develop and present tailored recommendations and a strategic roadmap to strengthen security controls and facilitate continuous security improvement. ● Provide customers with deeper insight and situational awareness into how users are consuming GCP, ensuring alignment with security guidelines and best practices. ● Collaborate with customers to reduce security risks and improve their overall confidence in the security of their Google Cloud platform. Minimum Qualifications: ● Proven expertise in Google Cloud security services, configurations, and architectural best practices. ● Demonstrated ability to perform comprehensive security assessments and identify security gaps. ● Experience in developing practical and actionable security recommendations and strategic roadmaps. ● Strong understanding of cloud security principles, compliance frameworks, and industry best practices. ● Excellent communication and presentation skills, with the ability to articulate complex security concepts to technical and non-technical audiences. Preferred Qualifications: ● Experience working with Enterprise, Select, or Partner segments. ● Familiarity with diverse customer maturity levels, from Early Stage to Mature cloud adoption. ● Experience delivering security consulting services across various regions (e.g., LATAM, NORTHAM,JAPAC, EMEA). ● Google Cloud security certifications Required skills As a Security SME, you will be responsible for leading and delivering comprehensive security posture reviews for Google Cloud environments. This role involves evaluating customer configurations and architecture, identifying risks, and providing actionable recommendations to enhance security and build customer confidence in their Google Cloud platform. Responsibilities: ● Conduct in-depth reviews and evaluations of Google Cloud configurations and architecture to assess security posture. ● Identify and analyze security misconfigurations, poor security practices, and potential vulnerabilities within customer GCP environments. ● Develop and present tailored recommendations and a strategic roadmap to strengthen security controls and facilitate continuous security improvement. ● Provide customers with deeper insight and situational awareness into how users are consuming GCP, ensuring alignment with security guidelines and best practices. ● Collaborate with customers to reduce security risks and improve their overall confidence in the security of their Google Cloud platform. Minimum Qualifications: ● Proven expertise in Google Cloud security services, configurations, and architectural best practices. ● Demonstrated ability to perform comprehensive security assessments and identify security gaps. ● Experience in developing practical and actionable security recommendations and strategic roadmaps. ● Strong understanding of cloud security principles, compliance frameworks, and industry best practices. ● Excellent communication and presentation skills, with the ability to articulate complex security concepts to technical and non-technical audiences. Preferred Qualifications: ● Experience working with Enterprise, Select, or Partner segments. ● Familiarity with diverse customer maturity levels, from Early Stage to Mature cloud adoption. ● Experience delivering security consulting services across various regions (e.g., LATAM, NORTHAM,JAPAC, EMEA). ● Google Cloud security certifications Desired skills 1. Identity and Access Management (IAM) Most cloud security incidents stem from access misconfigurations. An SME must master Google's resource hierarchy (Organization > Folder > Project > Resource). * GCP IAM Mechanics: Expertise in fine-grained IAM roles, conditional IAM, and deny policies. * Service Account Management: Securing service accounts, preventing key leakage, and implementing Workload Identity Federation and Workforce Identity Federation. * Access Governance: Utilizing IAM Recommender to enforce the principle of least privilege and managing access via Privileged Access Manager (PAM). 2. Security Posture Management & Threat Detection The core responsibility of this role is conducting "security posture reviews." * Security Command Center (SCC): Deep knowledge of SCC for defining and deploying security postures, monitoring for configuration drift, and analyzing real-time threat intelligence. * Organization Policies: Configuring and auditing both standard and custom organization policy constraints to govern what resources can be deployed. * Logging and Auditing: Designing logging architectures using Cloud Audit Logs, Cloud Logging, and Access Transparency logs for forensic investigations and threat detection. * Security Health Analytics: Leveraging built- in and custom detectors to identify vulnerabilities and misconfigurations automatically. 3. Network Security and Boundary Protection You must understand how to keep the right traffic in and the wrong traffic out. * VPC Service Controls: Designing robust security perimeters around GCP resources to prevent data exfiltration (a critical differentiator from AWS/Azure network security). * Zero Trust Architecture: Implementing BeyondCorp Enterprise, Context-Aware Access, and Identity-Aware Proxy (IAP) to shift from network- based to identity-based perimeters. * Edge & Network Defenses: Architecting Cloud Armor (WAF/DDoS protection), Cloud NAT, Private Google Access, and hierarchical firewall policies. 4. Data Protection and Cryptography * Key Management: Architecting encryption strategies using Cloud Key Management Service (KMS), including Customer-Managed Encryption Keys (CMEK) and Customer-Supplied Encryption Keys (CSEK). * Data Classification & Privacy: Using Sensitive Data Protection (formerly Cloud DLP) to discover, classify, and mask sensitive data across cloud storage and databases. * Secret Management: Securing application credentials and API keys via Secret Manager rather than embedding them in code. 5. Workload and Compute Security * Container Security: Securing Google Kubernetes Engine (GKE) and Cloud Run workloads, utilizing Container Analysis for vulnerability scanning, and enforcing deployment policies via Binary Authorization. * Infrastructure Hardening: Implementing Shielded VMs, OS Login, and secure CI/CD pipelines. * AI Workload Security: A growing focus area involving the secure deployment and management of AI/ML pipelines on Google Cloud. 6. Compliance Frameworks and Governance * Regulatory Mapping: Translating global compliance frameworks (e.g., ISO 27001, SOC 2, HIPAA, PCI DSS, FedRAMP) into native GCP technical controls. * Compliance Automation: Moving away from manual audits by utilizing Assured Workloads and Google Cloud's native tooling to enforce and evidence compliance continuously. 7. Advisory and Consulting Skills As an SME, technical knowledge must be paired with executive consulting capabilities. * Architecture Review Methodologies: Ability to assess complex, multi-region cloud architectures against the Google Security Foundations Blueprint. * Strategic Roadmapping: Translating technical vulnerabilities into actionable, prioritized, multi-phase remediation plans for customers at various maturity levels. * Stakeholder Communication: Presenting findings compellingly to both highly technical engineering teams and non- technical business leaders (CISO/CIO level).