Senior Cloud Security Engineer; GCP

We are looking for a Senior Cloud Security Engineer (GCP)to join our BUX team based in Amsterdam
.

Our engineering team sits at the heart of the company. We have a well-rounded team that cares about building great products that matter. You'll be part of a modern fintech company where you can try things, break things, fix them, and learn fast. Your work is visible, your input matters, and you helps hape both the product and how we build it.

We stay close to what's happening in investing and fintech, and we share what we learn. It's a place where you can stretch your skills, contribute to something real, and grow alongside people who take their craft seriously and enjoy building things together.

In a fintech environment, security is not just about protecting systems; it's about safeguarding user trust, ensuring regulatory compliance, and maintaining the integrity of financial operations. You'll have the opportunity to strengthen BUX's security posture, implement cutting-edge security solutions, and drive security awareness across our engineering organisation.

As a Google Cloud Security Expert, you will be the security subject matter expert for our engineering teams. This could mean:

• Strengthen the BUX security posture through proactive risk management and continuous improvement

  • Implement and manage Google Cloud Security Command Center Enterprise

  • Configure and maintain security monitoring, threat detection and alerting

  • Conduct regular security assessments and vulnerability scans

  • Develop and maintain security dashboards for visibility across cloud assets

• Implement and maintain security standards across the organisation

  • Define and document security policies, standards and best practices

  • Establish secure development guidelines and support teams in adoption

  • Ensure compliance with regulatory requirements and industry standards (SOC 2, ISO 27001, GDPR, DORA)

  • Work with the platform team to integrate security into CI/CD pipelines

• Support engineering teams with security questions, issues and guidance

  • Act as the security subject matter expert for development teams

  • Review and advise on security aspects of system designs and architectures

  • Assist with security incident investigation and response

  • Provide security training and awareness programs for engineering staff

• Manage cloud security operations

  • Configure and tune threat detection rules and security alerts

  • Develop automated response playbooks for common security scenarios

  • Monitor and respond to security findings, vulnerabilities and misconfigurations

  • Coordinate with external security partners and auditors as needed

• Drive continuous security improvement

  • Stay current with emerging threats, vulnerabilities and security technologies

  • Evaluate and recommend security tools and solutions

  • Track security metrics and report on security posture improvements

  • Includes on-call duties for security incidents

Java, Kotlin, Spring Boot, Google Cloud Platform (GCP), Kubernetes, Terraform, Git Hub Actions, Security Command Center Enterprise, SIEM/SOAR platforms, Kafka, CloudSQL, PostgreSQL, Cassandra, Elasticsearch

We are looking for you if you are passionate about security, you have strong technical and communication skills, and you thrive in a collaborative fintech environment.

Furthermore, we require:

• Senior / Staff level experience in cloud security

• Expert knowledge of Google Cloud Platform (GCP) security

• Hands-on experience with Google Cloud Security Command Center Enterprise (SCC Enterprise)

• Strong knowledge of SIEM/SOAR platforms and security operations

• Experience with cloud security posture management and compliance frameworks

• Knowledge of threat detection, vulnerability management and incident response

• Understanding of regulatory compliance…