GCP Cloud Security Engineer

• Conduct secure code reviews, including vulnerability identification and triage, exploitability reasoning, and assessment of common vulnerability classes such as injection, auth/authz, SSRF, insecure deserialization, secrets, and misconfiguration, delivering evidence-backed verdicts.
• Evaluate GCP security controls, with expertise in GCP IAM, service accounts, networking, storage, workload identity, audit logging, and cloud misconfigurations, ensuring alignment with least privilege principles and demonstrating the ability to judge cloud-specific exposure.
• Support calibration activities by developing and maintaining review rubrics, aligning reviewers, tracking adjudications, managing benchmark versioning, and providing structured quality reporting; this scope may be covered by one of the two engineers with client oversight.

Responsibilities

• secure code review; vulnerability identification and triage; exploitability reasoning; common classes such as injection, auth/authz, SSRF, insecure deserialization, secrets and misconfiguration; evidence-backed verdicts.
• GCP IAM, service accounts, networking, storage, workload identity, audit logging, cloud misconfigurations and least privilege; ability to judge cloud-specific exposure.
• Calibration, rubric writing, reviewer alignment, adjudication tracking, benchmark versioning and structured quality reporting. Could be covered by one of the two engineers with client oversight.

Qualifications

• Bachelors with 4+ years exp