Cloud Security Consultant

ResponsibilitiesAssess the end-to-end architecture from a data security and privacy standpoint.Review data flows across:GCP service projectsVirtual agents / conversational AITelephony platformsAPI proxiesDatastore, BigQuery, Cloud StorageOn-prem / Amex systems of recordIdentify risks related to:Customer data exposurePII handlingAuthentication and authorizationEncryption in transit and at restSecrets and key managementLogging, monitoring, and auditabilityData retention and deletionCross-boundary data movementReview security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation.Implement Sentinel policies for enforcing encryption standards.Implement database activity monitoring and blocking rules in GCP.Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.Produce findings report with risk ratings, gaps, and remediation recommendations.Required SkillsStrong experience in cloud security architecture, preferably Google Cloud Platform.Hands-on knowledge of:GCP IAMVPC / Shared VPCCloud Run / GKEBigQueryCloud StorageDatastore / FirestoreCloud KMS / Secret ManagerExperience assessing data protection controls for PII, PCI, or regulated customer data.Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects.Understanding of logging, SIEM integration, audit trails, and security monitoring.Experience with threat modeling and architecture risk reviews.Preferred SkillsExperience with conversational AI / virtual agent platforms.Knowledge of telephony/SIP integrations and contact center platforms.Experience with PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards.Familiarity with AI data governance, model safety, and GenAI security risks.