Senior Cloud Security Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Spearhead the design and review of secure Google Cloud architecture encompassing IAM, networking, workload protection, data protection, logging, monitoring, and compliance.

• Provide guidance to enterprise clients on Google Cloud security strategies that align with business risks, regulatory obligations, and operational objectives.

• Conduct assessments of Google Cloud security posture to detect significant risks, misconfigurations, control deficiencies, and operational vulnerabilities.

• Produce executive-level findings, prioritized remediation plans, and maturity-based security enhancement strategies.

• Oversee the implementation, configuration, tuning, and operationalization of Security Command Center and Security Command Center Enterprise.

• Incorporate findings from the Security Command Center into workflows related to vulnerability management, compliance, security operations, and executive risk reporting.

• Advise clients on Google SecOps, Chronicle, SIEM strategies, cloud telemetry, detection engineering, and SOC workflow design.

• Assist with the modernization and migration planning of SIEM, including log source rationalization, detection migration, alert tuning, and operational transition.

• Support clients in transitioning from disjointed monitoring approaches to scalable, cloud-native security operations models.

• Manage intricate technical workstreams from inception to completion, including technical direction, scope, risk management, and stakeholder coordination.

• Convert technical security findings into understandable business risks, investment priorities, and actionable recommendations for senior executives.

• Guide client teams in secure Google Cloud design, configuration, deployment, and enhancing operational maturity.

• Consult on Wiz use cases such as CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation processes.

• Provide expertise on Vertex AI and AI workload security, covering areas such as identity, access control, data protection, governance, logging, and monitoring.

• Develop architecture diagrams, assessment documents, roadmaps, implementation manuals, and operational runbooks.

• Create repeatable methodologies, assessment frameworks, implementation patterns, reference architectures, and reusable technical resources.

• Mentor consultants to enhance the overall capacity of the Google Cloud Security practice.

• Deliver technical leadership during client evaluations, executive briefings, architectural discussions, and operational meetings.

• Engage in process improvement and automation initiatives that enhance consistency, scalability, and quality of delivery.

⛳️ Requirements

• A minimum of 6 years in security consulting across various domains, with at least 2 years specifically as a Google Cloud consultant.

• Demonstrated success in delivering Google Cloud security architecture, posture modernization, and operational outcomes from initial discovery to final handover.

• Proven leadership in cloud security initiatives across security, cloud, DevOps, architecture, compliance, and operational teams.

• Successful integration of cloud-native security platforms, SIEM, CNAPP/CSPM, logging, monitoring, vulnerability management, and SOC workflows.

• Experience working within regulatory or industry frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, PCI, CMMC, or similar standards.

• Profound experience in designing, securing, deploying, and operationalizing Google Cloud environments.

• Extensive knowledge of Google Cloud security architecture, IAM, networking, logging, monitoring, data protection, workload security, and compliance-oriented design.

• Practical experience with Google Cloud security services, including Security Command Center or similar cloud-native security platforms.

• Experience in leading cloud security posture assessments, architectural reviews, or enterprise cloud security modernization projects.

• Proven capacity to manage complex technical engagements with various stakeholders, competing priorities, and enterprise-level environments.

• Highly adaptable consulting approach, capable of transitioning between strategy, architecture, implementation, delivery leadership, and executive advisory roles.

• Excellent communication, organizational, and problem-solving abilities, including the capacity to brief executives and direct technical teams.

• Strong documentation skills for producing diagrams, assessment reports, roadmaps, implementation plans, written recommendations, and supporting materials.

• Critical thinking skills to navigate security requirements alongside business objectives, operational realities, and customer maturity levels.

• Proven ability to adapt swiftly and effectively in fast-paced, dynamic client environments.

• REQUIRED CERTIFICATIONS: Google Cloud Professional Cloud Security Engineer or Professional Cloud Architect.

• Google Cloud Professional Security Operations Engineer or equivalent Google Cloud security experience.

🏝️ Benefits

• Paid parental leave.

• Flexible time off.

• Certification and training reimbursement.

• Digital mental health and wellbeing support membership.

• Comprehensive insurance options.