Security Engineer - Cloud & Operations

About the role

We are looking for a hands‑on Security Engineer to join our Cloud Security team. In this role you will design, build and operate cloud‑native detection and preventive controls on Google Cloud Platform, while actively investigating alerts generated by your own detections.

Key responsibilities

• Develop and maintain cloud detection rules in SIEM and EDR platforms, focusing on GCP‑specific attack paths.
• Design, deploy and tune preventive controls such as WAFs and organization‑wide security policies.
• Investigate SOC alerts end‑to‑end, perform root‑cause analysis and implement durable remediation.
• Build and operate internal cloud security tooling, scanning pipelines and cross‑project services.
• Tri­age and fine‑tune EDR alerts, contribute to playbooks and automate response workflows.
• Identify cloud misconfigurations, collaborate with engineering teams to right‑size IAM permissions.
• Partner with DevOps, IT, Product Security and Offensive Security to operationalize cloud restrictions and support compliance audits.

Required profile

• 2–4 years of experience in cloud security, detection engineering, security operations or security‑focused software engineering.
• Hands‑on experience with GCP security fundamentals such as IAM, organization policies, service accounts, Cloud Storage, Cloud Build and Cloud Run.
• Practical experience authoring, testing and managing detection rules in a SIEM platform (e.g., Splunk, Google SecOps).
• Ability to investigate security alerts from triage through root‑cause analysis and evidence collection.

Required skills

• Google Cloud Platform (GCP)
• IAM, organization policies, service accounts
• Cloud Storage, Cloud Build, Cloud Run
• SIEM platforms (Splunk, Google SecOps)
• EDR solutions
• Web Application Firewall (WAF)
• Detection rule authoring and tuning