Security Engineer

• Strengthen the BUX security posture through proactive risk management and continuous improvement
• Implement and manage Google Cloud Security Command Center Enterprise
• Configure and maintain security monitoring, threat detection and alerting
• Conduct regular security assessments and vulnerability scans
• Develop and maintain security dashboards for visibility across cloud assets
• Implement and maintain security standards across the organisation
• Define and document security policies, standards and best practices
• Establish secure development guidelines and support teams in adoption
• Ensure compliance with regulatory requirements and industry standards (SOC 2, ISO 27001, GDPR, DORA)
• Work with the platform team to integrate security into CI/CD pipelines
• Support engineering teams with security questions, issues and guidance
• Act as the security subject matter expert for development teams
• Review and advise on security aspects of system designs and architectures
• Assist with security incident investigation and response
• Provide security training and awareness programs for engineering staff
• Manage cloud security operations
• Configure and tune threat detection rules and security alerts
• Develop automated response playbooks for common security scenarios
• Monitor and respond to security findings, vulnerabilities and misconfigurations
• Coordinate with external security partners and auditors as needed
• Drive continuous security improvement
• Stay current with emerging threats, vulnerabilities and security technologies
• Evaluate and recommend security tools and solutions
• Track security metrics and report on security posture improvements
• Includes on-call duties for security incidents

Senior Cloud Security Engineer, GCP