Cloud Security Engineer – GCP

Designation: Cloud Security Engineer – GCP

Location: Dhahran, Saudi Arabia (Onsite)

Contract: 12 months, extendable

About the Role:

We're hiring a Cloud Security Engineer with a strong traditional security background who later specialized in Google Cloud someone who started in core security (legacy systems, non-cloud-native tooling) before moving into cloud security.

What You'll Do

• Deploy and tune Security Command Center, Google SecOps (Chronicle), and GCP data protection tools
• Secure Kubernetes/GKE workloads and container runtimes
• Manage IAM, network controls (VPC, Cloud Armor), and encryption (KMS) via Terraform
• Apply defense-in-depth across network, workload, and data layers
• Support migration of legacy security controls into GCP

What We're Looking For

• 5+ years dedicated cloud security experience, deep GCP expertise
• Pure security background (no cloud in early career); strong foundations in cloud concepts and core security principles (CIA triad, zero trust, least privilege, defense in depth)
• Proven experience securing legacy, non-cloud-native systems (firewalls, IDS/IPS, legacy OS, security appliances)
• Hands-on with Security Command Center, Google SecOps, GCP data protection tools
• Strong Kubernetes/GKE security knowledge
• Terraform experience for security controls (firewall rules, IAM, encryption keys)
• Hands-on KMS/encryption key configuration; clear CMEK vs. CSEK understanding

Nice to have: Professional Cloud Security Engineer certification or any other GCP Professional certification