Senior Cloud Security Engineer, GCP
BUX
full-time
Posted on:
Location Type: Hybrid
Location: Amsterdam • Netherlands
Visit company websiteExplore more
Job Level
About the role
- Strengthen the BUX security posture through proactive risk management and continuous improvement
- Implement and manage Google Cloud Security Command Center Enterprise
- Configure and maintain security monitoring, threat detection and alerting
- Conduct regular security assessments and vulnerability scans
- Develop and maintain security dashboards for visibility across cloud assets
- Implement and maintain security standards across the organisation
- Define and document security policies, standards and best practices
- Establish secure development guidelines and support teams in adoption
- Ensure compliance with regulatory requirements and industry standards (SOC 2, ISO 27001, GDPR, DORA)
- Work with the platform team to integrate security into CI/CD pipelines
- Support engineering teams with security questions, issues and guidance
- Act as the security subject matter expert for development teams
- Review and advise on security aspects of system designs and architectures
- Assist with security incident investigation and response
- Provide security training and awareness programs for engineering staff
- Manage cloud security operations
- Configure and tune threat detection rules and security alerts
- Develop automated response playbooks for common security scenarios
- Monitor and respond to security findings, vulnerabilities and misconfigurations
- Coordinate with external security partners and auditors as needed
- Drive continuous security improvement
- Stay current with emerging threats, vulnerabilities and security technologies
- Evaluate and recommend security tools and solutions
- Track security metrics and report on security posture improvements
- Includes on-call duties for security incidents
Requirements
- Senior-level experience in cloud security
- Expert knowledge of Google Cloud Platform (GCP) security
- Hands-on experience with Google Cloud Security Command Center
- Strong knowledge of SIEM/SOAR platforms and security operations
- Experience with cloud security posture management
- Knowledge of threat detection, vulnerability management and incident response
- Experience with Infrastructure as Code security (Terraform, Kubernetes)
- Strong communication skills to collaborate across engineering teams, Business Security Officer and other relevant stakeholders
- Ability to translate complex security concepts for technical and non-technical audiences
Benefits
- International work environment
- Company pension plan
- Flexibility is at our core; we offer a hybrid work environment (1-2 days at the office)
- Working from home allowance
- Mobility benefit
- Gym membership contribution via Urban Sports
- Learning budget and full access to our learning and development platform
- A1 Dutch language course for you (and your partner)
- Delicious lunches at the office
- The possibility to work from abroad for 1 month every 12 months
- Take care of your mental and emotional well-being with unlimited appointments with psychologists or coaches through OpenUp
- Regular team gatherings and fun company events
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
cloud securityGoogle Cloud Platform securityGoogle Cloud Security Command CenterSIEMSOARcloud security posture managementthreat detectionvulnerability managementincident responseInfrastructure as Code security
Soft Skills
strong communication skillscollaborationability to translate complex concepts
Certifications
SOC 2ISO 27001GDPRDORA