GCP Security Engineer, 6 months, London/Hybrid, £660/day (Inside IR35)

Overview:
We are seeking a highly skilled GCP Security Engineer to join a high-profile security transformation programme within a dynamic, enterprise-scale environment. This role will be instrumental in securing cloud infrastructure, data, and applications on Google Cloud Platform.

You will work closely with architecture, DevOps, and engineering teams to embed robust security controls across the cloud estate. The ideal candidate will be a hands-on practitioner with experience in threat modelling, and a solid understanding of DevSecOps principles.

GCP- IAM, VPC Perimeters, VPC Security Controls, Cloud Storage, Cloud Operations(Monitoring, alerting), Private networking(PSA, PSC), Google DNS

Candidate should possess a deep understanding of Google Cloud Platform (GCP), CISSP certification, and a robust skill set in various technologies, including Google BigQuery, SQL, DevSecOps, Data Pipelines, ETL, Continuous Delivery (CD), Continuous Integration (CI), Design Patterns, Object-Oriented Programming (OOP), Data Science, Terraform, MLOps, Infrastructure as code (IaC), Machine Learning, Python, and Big Data Analytics.

Terraform - Terraform Test, terraform Compliance test , Private registry

Must haves:

• Design, implement, and maintain security controls across GCP services
• Good understanding of security control implementation framework like OPA, GCP org policies,GCP SHAs, chef inspec
• Understand threat modelling activities for new and existing workloads
• Collaborate with engineering teams to integrate security best practices into CI/CD pipelines
• Support audit and compliance initiatives across GCP environments
• Monitor and respond to security incidents and vulnerabilities in GCP
• Extensive hands-on experience with Google Cloud Platform (GCP) security services
• Strong knowledge of Google BigQuery, SQL, and data access governance
• CISSP certification (or equivalent experience in cloud security)
• Proven track record of working within DevSecOps frameworks and secure SDLC
• Comfortable working in a hybrid model with 2-3 days onsite in London
• Develop and maintain security documentation, policies, and procedures.

Good to have:

• GKE (Admin, workload deployments),
• Harness
• Data Products
• Terraform Cloud, Sentinal policies
• Kitchen CI based Terraform CI testing.
• Developing Helm Charts and using them to deploy workloads to GKE.