Senior Cloud Security Engineer

Position
:
Senior Cloud Security Engineer

Department
:
Digital Platforms

Location
:
Doha

Reports to
:
Chief Technology Officer (CTO)

Employment type
:
Full‑time

At East‑West Digital / Iberdrola Innovation Middle East, we are scaling our cloud platform and need a highly capable Senior Cloud Security Engineer. You will be a hands‑on technical authority focused on cybersecurity, working shoulder‑to‑shoulder with engineering teams in a true Dev Sec Ops  approach to ensure our SaaS products on Google Cloud are secure by design, resilient against attacks, and built with robust, automated defenses.

• Act as the primary technical authority for cloud security.
• Partner with software architects to perform threat modelling on new SaaS products and embed security‑by‑design principles.
• Design, configure, and maintain the native Google Cloud security stack (Cloud Armor, conditional IAM, VPC Service Controls, Secret Manager, Security Command Center).
• Define and implement robust protections for our SaaS applications, focusing on API security, WAF configurations, DDoS mitigation, and secure multi‑tenant isolation.
• Guide and implement security automations and controls within CI/CD pipelines (SAST, DAST, container/artifact scanning).
• Conduct continuous internal security assessments of infrastructure and deployed applications, identify vulnerabilities, provide remediation strategies, and act as a key responder during security events.

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equivalent.
• At least 5–7 years of cybersecurity experience, with 3+ years of hands‑on experience securing Google Cloud environments.
• Master’s degree in Cybersecurity is preferred.
• Google Cloud Professional Cloud Security Engineer certification highly preferred.
• Additional certifications such as CISSP, CCSP, OSWE are a plus.

• Proficiency with the GCP security stack: IAM, Cloud Armor, VPC Service Controls, Secret Manager, Security Command Center.
• Experience with SaaS architecture, OWASP Top
  10, API security, and WAF configuration.
• Infrastructure as Code experience (Terraform) focused on security controls.
• Dev Sec Ops  integration: SAST/DAST within CI/CD pipelines.
• Programming/scripting (Python, Go, or Bash) for automation.
• Attacker & builder mindset, technical influence, pragmatism, ownership.

• Competitive tax‑free salary.
• Comprehensive health benefits.
• Relocation assistance.
• Modern workplace perks.
• Continuous learning platforms and sponsorship for relevant certifications.