Senior Cloud Security Engineer - GCP

We are seeking an experienced Senior Cloud Security Engineer to support a major enterprise transformation programme focused on secure cloud delivery, risk management and security governance across complex technology environments.

This role will sit at the centre of a large-scale delivery programme, working closely with engineering, architecture, infrastructure and security teams to ensure cloud-native solutions are designed, deployed and operated securely.

The successful candidate will bring strong experience across threat modelling, cloud security architecture, security controls and secure delivery practices within modern engineering environments.

Responsibilities

Risk & Threat Modelling

• Lead threat modelling activities across IAM, networking, compute, databases and sensitive data flows

• Identify and articulate security risks clearly to both technical and non-technical stakeholders

• Recommend pragmatic, delivery-aligned mitigation strategies

Secure Architecture & Engineering

• Design and implement cloud-native security controls across IAM, networking, encryption, secret management and observability

• Translate Information Security policies and standards into implementable technical controls

• Embed security into CI/CD pipelines, infrastructure provisioning and deployment workflows

• Advise engineering and delivery teams on secure Infrastructure-as-Code and configuration best practices

Security Governance

• Manage formal Data Privacy & Information Security Assessment processes

• Act as a key security representative across internal stakeholders and external vendors

• Drive remediation activities and manage security issues through to resolution

• Support governance, compliance and risk management activities across the programme

Experience Required

• Strong experience within Cloud Security Engineering or Security Architecture roles

• Hands-on experience implementing security controls within cloud-native environments

• Strong understanding of IAM, networking, encryption, secrets management and observability

• Experience embedding security within CI/CD and Infrastructure-as-Code environments

• Ability to engage with both technical and business stakeholders

• Experience working within complex enterprise or transformation programmes

• Strong understanding of security governance, risk and compliance processes

Desirable

• Experience across GCP environments

• Knowledge of modern DevSecOps practices

• Exposure to enterprise security frameworks and regulatory environments

• Experience operating within multi-vendor delivery environments

This is an excellent opportunity to join a high-profile transformation programme and play a key role in shaping secure cloud delivery across a complex enterprise landscape.