Senior Cloud Security Engineer (GCP)

Are you an experienced Cloud Security Engineer with in-depth knowledge of Google Cloud Platform (GCP)? Do you want to strengthen cloud security within an innovative fintech organisation? And are you passionate about implementing advanced security solutions, improving threat detection, and helping engineering teams build secure products? Then this could be the role for you!

In the financial services sector, information security is essential. Protecting user data, ensuring the integrity of financial operations, and meeting regulatory requirements all demand a strong security strategy. As a Senior Cloud Security Engineer, you will play a key role in achieving these goals. You will have the opportunity to develop security standards, implement modern cloud technologies, and continuously improve the organisation’s digital resilience.

As a Senior Cloud Security Engineer, you will be the subject matter expert in Google Cloud Security. You will work closely with engineering and platform teams to identify risks, implement security measures, and integrate security into development processes.

• Strengthening the organisation’s cloud security posture through proactive risk management and continuous improvement;
• Implementing and managing Google Cloud Security Command Center Enterprise;
• Configuring and optimising security monitoring, threat detection, and alerting;
• Conducting security assessments and vulnerability scans;
• Developing and maintaining security dashboards to provide visibility into cloud resources and security risks;
• Defining and maintaining security policies, standards, and best practices;
• Developing secure development guidelines and supporting engineering teams in their implementation;
• Integrating security measures into CI/CD pipelines and contributing to the further development of DevSecOps practices;
• Advising on security aspects of system designs, cloud architectures, and technical solutions;
• Supporting security incident investigations and coordinating appropriate response measures;
• Configuring and fine-tuning threat detection rules, security alerts, and automated response playbooks;
• Monitoring and following up on security findings, vulnerabilities, and misconfigurations;
• Collaborating with internal stakeholders, external security partners, and auditors;
• Keeping up to date with emerging threats and technological developments and translating these into actionable security improvements;
• Monitoring security metrics and reporting on improvements to the organisation’s security posture;
• Participating in an on-call rotation for security incidents.

You will join a technically driven engineering environment where collaboration, innovation, and knowledge sharing are central. You will have the freedom to propose improvements, introduce new security solutions, and directly influence how secure products are developed.

• Extensive senior-level experience in cloud security;
• Expert knowledge of Google Cloud Platform (GCP) and its security capabilities;
• Hands-on experience with Google Cloud Security Command Center;
• Strong knowledge of SIEM and SOAR platforms and security operations;
• Experience with Cloud Security Posture Management (CSPM), threat detection, vulnerability management, and incident response;
• Experience securing Infrastructure as Code and technologies such as Terraform and Kubernetes;
• Familiarity with cloud security monitoring, security automation, and automated response mechanisms;
• Experience integrating security into CI/CD pipelines and software development processes;
• Strong communication skills and the ability to collaborate effectively with engineering teams and other stakeholders;
• The ability to translate complex security concepts into clear, actionable advice for both technical and non-technical audiences;
• An analytical, proactive mindset with a strong focus on continuous improvement.
• Nice to have:
  • Knowledge of compliance frameworks and regulations such as SOC 2, ISO 27001, GDPR, and DORA;
  • Relevant security certifications, such as CISSP, CCSP, GCSA, or GIAC;
  • Experience with AWS or Microsoft Azure in addition to GCP;
  • Knowledge of DevSecOps principles and associated tooling;
  • Experience with container security and Kubernetes security best practices;
  • Familiarity with penetration testing and ethical hacking techniques;
  • Experience in regulated industries, preferably fintech or financial services;
  • Knowledge of secure coding practices and application security testing, such as SAST and DAST;
  • Experience with modern technologies and platforms such as Java, Kotlin, Spring Boot, GitHub Actions, Kafka, and various database solutions.

• An exciting senior-level position within an innovative and growing fintech organisation;
• The opportunity to contribute directly to the security strategy and the continued development of cloud security practices;
• The chance to work with modern cloud technologies, security platforms, and automation solutions;
• Plenty of room for initiative and the opportunity to introduce new security tools and best practices;
• Collaboration with skilled professionals in a technically advanced engineering environment;
• A culture that values innovation, teamwork, knowledge sharing, and continuous improvement;
• The opportunity to make a tangible impact on the security and reliability of digital financial products;
• Opportunities to further develop your technical expertise and contribute to the organisation’s growth.