Position: GCP Security Engineer
Company: EPAM
Category: Security
Experience required: 3y
English level: upper

RESPONSIBILITIES
 The GCP Security Engineer is responsible for providing technical leadership and
subject matter expertise in GCP environments on enterprise scale, with
thorough knowledge of cloud engineering and good understanding of security
best practices standards, compliance, and regulations.
 Working across various cloud security domains such as Cloud Security Posture
Management, Identity and Access Management; Data Protection and its
application; Data Loss Prevention; Automatic Incident Response; Business
Continuity, Disaster Recovery; DevSecOps; Microservice Security, and custom
scripting around it.
 Plan, design and implement security solutions for multi-cloud systems and
workloads with GCP as a primary public cloud provider.
 Collaborate with adjacent teams (engineering, infrastructure, development,
database, operations, etc.).
REQUIREMENTS
 Direct Computer Science education (Bachelors+) OR equivalent experience.
 Security experience with any domain.
 Hands on experience with GCP services and strong engineering background.
 Successfully participated in at least one production project.
 Understanding of concepts of a Software development process, cloud security,
and their assessment methodologies.
 Able to work closely with other project team roles (developers, BA, testers,
architects, managers).
 Expected to be able to follow and understand a defined security process, train
other team members, and contribute to process improvement.
 Scripting/software development experience is a must.
NICE TO HAVE
 Security engineering experience in at least one business domain.
 Understanding of at least one compliance/regulation such as ISO 2700x/PCI
DSS/HIPAA/HITRUST/GDPR/SOX/FedRAMP.
 Nice to have 1+ Security Certification such as GCP Professional Cloud Architect,
Professional Cloud Security Engineer, Professional Cloud Network Engineer, or
equivalent knowledge.
 Professional Security Certifications such as CISSP/CISM/CISA/ECSA/CCSK/SSCP
is considered as an advantage.
Candidates search key words:
 Security Engineer
 GCP
 Google Cloud
 Google Cloud platform
 Cloud Security/CSPM/Cloud Security Posture Management
 Infrastructure security
 Cloud + security + Engineering
 DevSecOps/DevOps + security
 Scripting/Automation/Python/Bash/Go
 Compliance/Regulations/Engineer + [PCI|SOX|FedRamp|NIST|HIPAA|HiTRUST]
 Security + [GCP|Google]
 Tools + Cloud Armor, Cloud Build, Cloud Console, Cloud Data Loss Prevention, Cloud
Deployment Manager, Cloud DNS, Cloud Endpoints, Cloud Functions, Cloud Identity,
Cloud Identity-Aware Proxy, Cloud Context-aware access, Cloud Key Management
Service, Cloud Load Balancing, Cloud NAT, Cloud Pub/Sub, Cloud Router, Cloud SQL,
BigQuery, Cloud Storage, Cloud VPN, Compute Engine, Kubernetes Engine, 
Stackdriver, Virtual Private Cloud (VPC), VPC Service Controls, Dome 9, PaloAlto
Prisma, Divvycloud, Cloud Health, Crowdstrike, Cloudconformity, Cloudpassage