Senior Cloud Security Engineer - GCP

$119,700 - $146,300/Yr

Surescripts - Arlington, VA

Full-time - Senior

Arlington, VA

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

The Senior Cloud Security Engineer - GCP is responsible for architecting, deploying, and operating secure cloud infrastructure that meets business needs. This role focuses on enhancing the company's security posture within its cloud computing environment, assessing threats, and providing security direction to support operational innovation.

Responsibilities

• Develop and maintain secure, resilient enterprise-grade cloud processes in tandem with architects and system engineers.
• Secure business applications and computing environments across commercial, private or hybrid cloud infrastructures.
• Protect business applications in compliance with privacy, security, business resiliency and compliance frameworks as defined in corporate policies.
• Maintain a consistent, secure cloud security environment and conduct rigorous oversight of security systems and configuration administration.
• Deploy strong identity and access management (IAM) controls across applications and computing environments.
• Assist with development, maintenance, and utilization of scripts to support custom ETL tools with a security focus for data flow.
• Attend regular technical project and implementation meetings and serve as the security consultant for secure cloud application configurations.
• Actively monitor, assess, and recommend initiatives based on new and emerging threats to cloud computing environments.
• Manage remediation efforts after security assessment findings identify weaknesses.
• Document, formulate and enforce areas of security improvement that balance risk with business operations.
• Assist in maintaining strong oversight with cloud computing vendors to safeguard against undue risk.
• Stay apprised of current and proposed security changes impacting regulatory and industry best practices.
• Serve as a key resource in incident response, tracking occurrences and resolutions with strict documentation.
• Attend and engage in change and project management meetings.
• Produce security metrics for security and business leaders.
• Provide and participate in cross training to ensure business continuity.
• Perform other duties as assigned.

Requirements

• Bachelor's degree in computer science, information systems, MIS or related field, or equivalent experience.
• 5+ years of experience in progressive, related experience in cybersecurity as a practitioner.
• 2+ years of experience with Google Cloud Platform (GCP).
• Strong Linux and Windows support skills.
• Experienced in cloud networking architecture and cloud operations.
• Familiarity with tools such as Terraform, Git, Jenkins, Chef, Puppet and Salt.
• Network and encryption experience, including VPNs, IPsec, SSL/TLS, LDAP and PKI.
• Familiarity with security solutions such as CrowdStrike, Tenable, XSOAR, Proofpoint, Splunk.
• Experience with scripting languages such as Python, Ruby, PowerShell and JavaScript.
• Experience and understanding of various regulatory requirements and laws, including HITRUST, HIPAA, NIST, SOC2.
• Up-to-date understanding of incident response, system configuration, vulnerability management and hardening guidelines.
• Cyber security experience and proficiency in various systems and technologies, information security risk and vulnerability remediation, automation and scripting, network monitoring, malware protection and analysis, intrusion detection and SIEM systems.
• Solid understanding of data security requirements, policies, compliance, auditing and regulatory processes.

Nice-to-haves

• Holds or working toward one or more: CCSP, CISSP, GCP Certification.

Benefits

• Comprehensive healthcare (including infertility coverage)
• Generous paid time off including paid childbirth and parental leave and mental health days
• Pet insurance
• 401(k) with company match and immediate vesting