Cloud Security Engineer - (GCP Data Security)

The Opportunity

We are seeking a Cloud Security Consultant (GCP Data Security) to evaluate and strengthen the security posture of a cloud-native conversational AI ecosystem built on Google Cloud Platform (GCP). This role is centered on assessing data protection, cloud architecture, identity controls, and AI-related security risks across integrated enterprise environments. The ideal candidate will bring deep expertise in cloud security architecture, data protection, and risk assessment while ensuring secure communication between AI services, APIs, telephony platforms, and enterprise backend systems.

Key Responsibilities

• Perform comprehensive security assessments of cloud-based architectures supporting conversational AI and enterprise applications.
• Analyze data movement across cloud services, AI platforms, APIs, telephony systems, storage platforms, and on-premises environments to identify potential security concerns.
• Evaluate the effectiveness of controls protecting sensitive customer information throughout the application lifecycle.
• Review identity and access management configurations, service accounts, authentication mechanisms, and authorization models within Google Cloud.
• Assess encryption strategies for data transmission, storage, and cryptographic key management.
• Examine logging, monitoring, and audit capabilities to ensure security visibility and compliance.
• Validate network security architecture, including Shared VPCs, segmentation, private connectivity, and hybrid cloud integrations.
• Design and implement policy controls to enforce cloud security and encryption standards.
• Assess database security configurations and recommend monitoring and protection strategies.
• Identify AI-specific security risks related to model interactions, prompt handling, knowledge repositories, and sensitive data exposure.
• Conduct architecture risk assessments and deliver actionable recommendations with prioritized remediation plans.
• Collaborate with engineering, infrastructure, and security teams to strengthen overall cloud security posture.
• Prepare detailed assessment reports outlining security gaps, risk ratings, and mitigation strategies.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related technical discipline.
• Minimum 7 years of experience in cloud security architecture, security consulting, or enterprise security assessments.
• Strong expertise in Google Cloud Platform security services and architecture.
• Hands-on experience with Google Cloud IAM, Shared VPC, Cloud Run, GKE, BigQuery, Cloud Storage, Firestore/Datastore, Cloud KMS, and Secret Manager.
• Experience evaluating security controls for sensitive and regulated data, including PII, PCI, or similar compliance requirements.
• Strong understanding of API security principles, including OAuth, mutual TLS (mTLS), secure token management, API gateways, and service authentication.
• Knowledge of hybrid cloud networking, firewalls, private connectivity, and secure network segmentation.
• Experience reviewing security logging, audit trails, SIEM integrations, and monitoring frameworks.
• Strong understanding of threat modeling methodologies and security architecture review processes.
• Excellent analytical, documentation, and communication skills.

Preferred Qualifications

• Experience securing conversational AI or virtual assistant platforms.
• Familiarity with telephony infrastructure, SIP integrations, or enterprise contact center technologies.
• Knowledge of industry security and compliance frameworks such as PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards.
• Understanding of AI governance, large language model security, prompt injection risks, and GenAI security best practices.
• Experience implementing cloud security policies and governance within enterprise-scale Google Cloud environments.

What We're Looking For

• A security professional with a strong foundation in cloud architecture and data protection.
• Someone who can identify architectural weaknesses and recommend scalable security improvements.
• An individual who excels at performing detailed risk assessments across complex enterprise environments.
• A collaborative consultant capable of working effectively with cross-functional engineering and security teams.
• A proactive problem-solver who stays informed about evolving cloud security and AI security technologies.
• A clear communicator who can translate technical findings into practical recommendations for both technical and business stakeholders.