GCP Security

Greetings from TCS!!!!!

Role: GCP Security

Experience: 8 to 10 years

Location: Pan India

Job description:

• Design and implement security architectures and guardrails for Google Cloud organizations, folders, projects, networks, workloads, and shared services.
• Engineer and review identity and access controls using Cloud IAM, service accounts, workload identity patterns, federation, privileged-access controls, and least-privilege principles.
• Build and validate secure landing-zone controls, including organization policies, resource hierarchy, network segmentation, centralized logging, encryption, key management, secrets management, and security monitoring.
• Configure, operate, and improve Google Cloud security capabilities such as Security Command Center, Cloud Armor, VPC Service Controls, Cloud KMS, Secret Manager, Sensitive Data Protection, Cloud Audit Logs, and Google SecOps integrations.
• Perform cloud security posture reviews, threat modelling, architecture assessments, configuration reviews, vulnerability analysis, and risk-based remediation planning.
• Embed security into infrastructure-as-code, CI/CD pipelines, container and Kubernetes platforms, serverless services, and software delivery workflows.
• Develop policy-as-code, automated compliance checks, security dashboards, detection logic, operational runbooks, and evidence collection mechanisms.
• Investigate cloud security findings and incidents, support root-cause analysis, coordinate containment and remediation, and improve preventive and detective controls.
• Partner with cloud platform, application, DevSecOps, SOC, data, privacy, risk, and compliance teams to implement security requirements without creating unnecessary delivery friction.
• Create technical standards, reference architectures, playbooks, control evidence, and concise risk reports for engineering and leadership stakeholders.
• Support introductory security assessments for generative and agentic AI workloads, including agent identity, access boundaries, model and data access, prompt and response protection, tool permissions, monitoring, abuse cases, and secure deployment patterns.
• Mentor engineers, conduct design reviews, contribute to reusable accelerators, and promote continuous improvement across cloud security engineering practices.