Cloud Security Engineer

Job Summary

To enhance security within the software development lifecycle, the full-time remote Cloud Security Engineer will integrate security controls into CI/CD pipelines, manage vulnerability governance, and define secure container images for deployment on Google Cloud Platform (GCP).

Key responsibilities

• Integrate security controls into CI/CD pipelines, ensuring security is part of the delivery flow
• Evaluate and implement hardened container images to reduce attack surface and CVEs
• Lead vulnerability management and governance, prioritizing remediation efforts based on risk

Required qualifications

• 5+ years of experience in Cloud Security Engineering, DevSecOps, or Security Engineering in production environments
• Proficiency in Google Cloud Platform (GCP) IAM, networking, and security policies
• Practical experience integrating security into CI/CD pipelines and using vulnerability scanning tools
• Experience with Docker/Kubernetes in production, including hardening and dependency management
• Solid scripting skills in Python and/or Bash for automating security controls