Senior Cloud Security Engineer (GCP)

About the Role

Astek is seeking an experienced Senior Cloud Security Engineer specializing in Google Cloud Platform (GCP) to join our client's team in Riyadh. This full-time role involves leading the design, implementation, and management of advanced cloud security architectures within GCP environments. The position requires 5-10 years of relevant experience.

Key Responsibilities

• Architect, deploy, and manage Google Cloud Security Command Center Enterprise for centralized cloud security visibility and operations.
• Implement and manage Cloud Security Posture Management (CSPM) to identify misconfigurations, enhance security posture, and support compliance.
• Develop the organization’s Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) strategy across Google Cloud environments.
• Design and manage VPC Service Controls to establish secure perimeters and mitigate data exfiltration risks.
• Deploy and tune Container Threat Detection within Google Kubernetes Engine (GKE) to protect containerized workloads.
• Manage Google Cloud SecOps (formerly Chronicle) for security telemetry ingestion, detection engineering, and threat hunting.
• Configure and manage Google Cloud Armor, including WAF rules and DDoS protection, for public-facing applications.
• Engineer and optimize SIEM capabilities for detecting high-fidelity threats.
• Build and maintain SOAR playbooks for automated alert triage, enrichment, investigation, and containment.
• Lead the investigation and resolution of complex security threat cases.
• Perform deep technical analysis of active threats and collaborate with SOC and technology teams on remediation.
• Continuously improve cloud security controls, detection logic, response processes, and operational documentation.

Required Qualifications and Experience

• At least 5 years of experience in cloud security, with strong hands-on expertise in Google Cloud environments.
• Proven experience deploying, configuring, and tuning:
  • Google Cloud Security Command Center
  • Google Cloud SecOps / Chronicle
  • Google Cloud Armor
  • VPC Service Controls
  • Google Cloud DLP and related data protection tools
• Strong understanding of Google Cloud security architecture, IAM, networking, logging, monitoring, and security controls.
• Practical experience securing Kubernetes and Google Kubernetes Engine (GKE) environments.
• Knowledge of container runtime security, container threat detection, and workload protection.
• Experience with SIEM, SOAR, threat detection, threat hunting, and incident response.
• Ability to design and automate security operations workflows and response playbooks.
• Strong analytical and problem-solving skills for investigating complex security incidents.
• Excellent communication skills and the ability to work effectively with security, infrastructure, DevOps, and SOC teams.
• Professional working proficiency in English.

Preferred Qualifications

• Experience with security and compliance frameworks such as ISO 27001, NIST, CIS, or PCI DSS.
• Experience with infrastructure-as-code and security automation.
• Familiarity with DevSecOps practices and cloud-native application security.
• Experience operating security platforms in large-scale or highly regulated environments.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, working with a client of Astek. The role involves collaboration with various technical teams including SOC, infrastructure, and DevOps.