Senior Cloud Security Engineer at 4G Capital

What You'll Do


Own and continuously improve the cloud security posture across our GCP organisation.
Design and enforce least-privilege IAM/RBAC models at organisation level
Secure VPC networking, firewall policies, private connectivity, and perimeter protections including Cloud Armor.
Strengthen API gateway security (Apigee or equivalent) and service-to-service authentication patterns.
Operationalise Security Command Center and drive structured remediation of high-risk findings.
Embed security controls into CI/CD pipelines, integrating SAST, DAST, dependency, container, and secret scanning.
Define and enforce secure Infrastructure as Code standards using Terraform and policy-as-code guardrails.
Prevent configuration drift and enforce secure deployment patterns across environments.
Support audit readiness, governance initiatives, and regulatory compliance requirements.
Participate in incident response and drive post-incident security improvements.


What We're Looking For


5+ years of experience in Cloud Security, Platform Security, or DevSecOps within production environments.
Deep, hands-on experience securing multi-project environments on Google Cloud Platform.
Strong expertise in IAM design, access governance, and role inheritance modeling.
Advanced understanding of VPC networking, firewall rules, private connectivity, and Zero Trust architecture.
Experience with cloud security posture management tools such as Security Command Center, Cloud Armor.
Experience securing API gateways (Apigee preferred) and modern cloud-native architectures.
Strong Terraform and Infrastructure as Code experience with embedded security controls.
Proven ability to integrate security controls into CI/CD pipelines and engineering workflows.
Experience securing containerized and/or serverless workloads (Docker, Kubernetes, Cloud Run).
Solid understanding of application security principles (OWASP Top 10, secure coding practices).
Strong scripting and automation skills (Bash, Python).
Experience operating within regulated or compliance-driven environments is advantageous.