Senior Associate - Senior GCP Security Engineer

5+ years of experience in cloud security, with the majority focused on GCP environments. Deep hands-on experience with GCP security services including IAM, VPC Service Controls, Cloud Armor, KMS, Secret Manager, DLP, and SCC. Strong Elastic SIEM experience including log ingestion, detection engineering, alert management, and threat correlation. Production-level Terraform experience including module development, infrastructure automation, and state management. Experience integrating security controls into CI/CD pipelines using Harness or equivalent platforms. Strong knowledge of Kubernetes and GKE security including pod security admission, network policies, Workload Identity, and Binary Authorization. Hands-on experience with ICAM or enterprise identity platforms governing non-human identities and workload access. Practical knowledge of AI/ML security including Vertex AI workload protection, LLM API governance, and training data security. Proctored technical exam (including code writing, where appropriate) will be required before any offer can be extended In person interview will be required in NY Home Office before any offer can be extended Google Professional Cloud Security Engineer or Professional Cloud Architect certification. Experience with policy-as-code tooling such as OPA/Rego, Sentinel, or Checkov. Familiarity with AWS security services including IAM, GuardDuty, SCPs, and multi-cloud security architectures. Experience with Cribl Stream or similar log routing technologies integrated with Elasticsearch. Understanding of compliance-driven security requirements including NY DFS 23 NYCRR 500, NAIC, NIST CSF, CIS Benchmarks, and ISO 27001. Working knowledge of enterprise identity platforms including SailPoint, CyberArk, Ping Identity, Active Directory, and LDAP. Experience securing AI agent frameworks such as LangChain or Vertex AI Agent Builder.