CI/CD Security Integration ("Shift-Left") Proven ability to integrate automated security gates (SAST/DAST/SCA) into pipelines
using tools like Google Cloud Build, GitHub Actions, or GitLab CI/CD.
Infrastructure as Code (IaC) & Security Advanced proficiency with Terraform alongside automated IaC scanning tools
(e.g., Checkov, Terrascan, or Open Policy Agent (OPA)).
Container & Kubernetes Security Hands-on experience securing containerized workloads deployed on Google Kubernetes Engine (GKE)
and managing secure image lifecycles via Google Artifact Registry.
Automation Scripting Strong coding skills in Python, Go, or Bash to build custom security guardrails and automation scripts.
Core Certification Active Google Cloud Professional Cloud Security Engineer certification.
Advanced Container Credentials Holding a CKS (Certified Kubernetes Security Specialist) designation.
Broad Cloud Security Standards Industry-recognized credentials such as CISSP, CCSP, or CSSLP (Certified Secure Software Lifecycle Professional).
Cross-Cloud/Hybrid Experience Background in migrating workloads specifically from AWS or Azure to GCP, or managing hybrid-cloud security architectures.
Specific Third-Party Tooling Experience with premium security platforms like Snyk, Wiz, Prisma Cloud, SonarQube, or DefectDojo for vulnerability orchestration.
Threat Modeling Experience conducting application threat modeling (e.g., using STRIDE or PASTA frameworks) prior to cloud migration.
Leadership & Agile Prior experience leading or mentoring agile engineering teams, with a knack for translating complex security risks into clear engineering requirements.

Hands-on Security Operations (SecOps) Lead to spearhead the security transformation and governance of our large-scale migration to
Google Cloud Platform (GCP). With over a decade of cybersecurity experience under your belt, you will bridge the gap between legacy security frameworks and modern, cloud-native security paradigms.
Migration Security Leadership Define, implement, and oversee the SecOps migration roadmap, ensuring security controls are baked i
into the cloud architecture from day one.
Incident Response & Threat Management Lead the detection, isolation, and remediation of security incidents during hybrid and cloud-native phases.
GCP Security Engineering Deploy and optimize GCP-native security tool