Cloud Engineer

• Partner with Architecture, Developer Experience (DevX), and Site Reliability Engineering (SRE) teams to shape and implement our GCP Zero-Trust security architecture.
• Provide expert oversight and validation of security controls, acting as a critical second-line partner to ensure our cloud environment is fundamentally secure.
• Drive the operationalization of Google's Security Command Center Enterprise (SCCE), turning its powerful features into a proactive threat detection and compliance engine.
• Serve as the subject matter expert for securing containerized (Docker, Kubernetes) and serverless applications within GCP.
• Collaborate on best practices for the enforcement of security quality gates for Infrastructure as Code (IaC) and Policy as Code (PaC) implementations.
• Govern security controls within our CI/CD pipelines, overseeing and adjusting security gates to prevent vulnerabilities from reaching production.
• Mature and scale our application security tooling processes (Static and Dynamic Testing, Open-Source Software Scanning, secrets detection), translating raw findings into actionable risk intelligence for development teams.
• Develop and automate vulnerability management processes, using a risk-based approach to prioritize and drive remediation.
• Lead by influence, providing expert guidance on secure coding practices and modern security patterns to our engineering teams.
• Act as a key liaison for our bug bounty program, coordinating between vendors and internal teams to ensure swift resolution.
• Mentor and support our Security Advocate program, empowering them to elevate the security posture across the organization through awareness and training exercises.
• Collaborate effectively with cross-functional teams, including development, operations, compliance, and incident response.

Application Security Cloud Engineer

Senior Software Engineer – Cloud Engineering, FinOps

Director, Private Cloud Platform Engineering