Google Cloud Security Specialist, GCP

• Assess the bank's technologies, applications, and overall security controls in cloud platforms to identify potential risks and vulnerabilities
• Understand and comply with the Bank’s Global Information Security policy and relevant cybersecurity threats to complete security assessments
• Provide expert technical guidance to support partners
• Adapt testing methods to emerging cybersecurity regulations and evolving threats
• Develop others on the team
• Improve vulnerability identification quality control for the cloud environment and collaborate across Vulnerability Management for end-to-end adoption
• Align strategy and roadmaps across Cloud Security, Cyber Security Operational Controls, Security Functions and Capabilities
• Perform gap analysis of current controls, formulate recommendations, and develop action plans
• Provide consulting as a cloud vulnerability identification subject matter expert
• Evaluate new technologies for integration into cloud vulnerability management work streams
• Support audit and regulatory inquiries
• Guide engineering staff in solving complex challenges
• Lead efforts to identify vulnerabilities and misconfigurations in cloud platforms and workloads
• Manage daily operations of Aqua, Wiz, Qualys, and Crowd Strike
• Enhance vulnerability identification processes for hybrid cloud platforms
• Drive cloud security solutions in alignment with the Bank’s cloud strategy and security best practices
• Implement and improve proactive security controls to prevent external threat actors from infiltrating systems or information
• Research and provide leadership updates regarding advanced threats
• Monitor new threats and complex attempts to compromise security controls
• Develop partnerships by demonstrating operational expertise as a subject matter expert

• 3+ years understanding of Google GCP native services, tools, and architecture
• Understanding of cloud security principles and practice
• Working knowledge of cloud threat landscape
• Technical experience in infrastructure and/or security functions
• Understanding of Dev Sec Ops  and CI/CD pipeline integration through security engineering life cycles
• Understanding of threat modeling and frameworks
• Understanding of vulnerability management and scanning tools
• Experience in project management
• Well-developed analytic, qualitative, and quantitative reasoning skills with demonstrated creative problem-solving ability
• Ability to work independently with little oversight on complex initiatives
• Ability to communicate complex concepts to all levels of understanding and technical ability
• Desired: CISSP/CCSP/CISM
• Desired:
  Cloud-specific security certifications such as SANS/GIAC
• Desired:
  Vendor-specific and relevant certifications
• Desired:
  Bachelor's degree in a technical field

Demonstrates expertise in cloud security principles, vulnerability management, and risk assessment, with a strong ability to communicate complex security concepts effectively. Proven experience in leading security initiatives and enhancing security controls in cloud environments.

• Cloud Security Principles
• Vulnerability Management
• Google GCP Native Services
• Dev Sec Ops  Integration
• CISSP/CCSP/CISM

• Vulnerability Identification
• Security Assessments
• Gap Analysis
• Threat Modeling
• Cloud Threat Landscape
• Analytic Reasoning
• Project Management
• Security Engineering Life cycles
• Cloud Security Solutions
• Complex Problem-Solving

• Creative Problem-Solving
• Independent Work
• Communication Skills

• CISSP
• CCSP
• CISM
• SANS
• GIAC

• Cybersecurity
• Cloud Platforms
• Security Controls
• Regulatory Compliance
• Security Best Practices

• Aqua
• Wiz
• Qualys
• Crowd Strike