Senior Cloud Security Engineer – Google Cloud

Job in Riyadh, Riyadh Region, Saudi Arabia

Listing for: Astek Middle East

Full Time position
Listed on 2026-09-17

Job specializations:

IT/Tech
Cybersecurity, Information Security & Data Protection, Security Management & Operations, Network Security
Security
Cybersecurity, Information Security & Data Protection, Security Management & Operations, Network Security

Salary/Wage Range or Industry Benchmark: 300000 - 500000 SAR Yearly SAR 300000.00 500000.00 YEAR

We are looking for an experienced Senior Cloud Security Engineer to lead the design, implementation, and management of our Google Cloud security architecture
.

This role sits at the intersection of proactive cloud security posture management and reactive threat detection and response
, leveraging Google Cloud's modern security ecosystem to protect infrastructure, containerized workloads, applications, and sensitive data.

The ideal candidate will have strong hands-on experience across Google Cloud security, Security Command Center, Google Sec Ops, Kubernetes/GKE security, data protection, SIEM/SOAR and network security
.

Key Responsibilities Google Cloud Security Platform

Architect, deploy, configure, and manage Google Cloud Security Command Center (SCC) Enterprise as the centralized platform for cloud security visibility and operations.
Establish and continuously improve security monitoring and operational capabilities across Google Cloud environments.

Cloud Security Posture & Data Protection

Implement Cloud Security Posture Management (CSPM) to continuously identify cloud misconfigurations and support compliance requirements.
Drive Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) initiatives to discover, classify, monitor, and protect sensitive data.
Design and manage VPC Service Controls to establish secure perimeters around sensitive resources and reduce data-exfiltration risks.
Implement attribute-based access controls and context-aware security policies where required.
Deploy and tune Container Threat Detection within Google Kubernetes Engine (GKE).
Identify anomalous behavior and security threats affecting containerized workloads.
Configure and manage Google Cloud Armor to protect public-facing applications against DDoS attacks and web-based exploits.
Develop and maintain appropriate WAF rules to strengthen application and network security.
Manage Google Cloud Sec Ops as the primary platform for security telemetry ingestion, monitoring, investigation, and threat hunting.
Engineer and optimize SIEM capabilities to detect high-fidelity threats at scale.
Build and maintain SOAR playbooks to automate triage, enrichment, investigation, and rapid containment.
Lead investigations into complex security threat cases, providing deep technical analysis and coordinating with the broader SOC team.
Support the rapid containment and resolution of active security threats.

Requirements

5+ years of dedicated cloud security experience
, with strong technical expertise in Google Cloud/GCP environments.
Hands-on experience deploying, configuring, and tuning Google Cloud Security Command Center (SCC).
Hands-on experience with Google Cloud Sec Ops / Chronicle
.
Practical experience with GCP-native data protection tools
, including DSPM and DLP
.
Strong understanding of Kubernetes and Google Kubernetes Engine (GKE) security
, including container runtime environments.
Experience with cloud security posture management and cloud misconfiguration detection.
Experience with VPC Service Controls and cloud perimeter security.
Experience with Google Cloud Armor and WAF security controls.
Strong knowledge of SIEM, SOAR, threat detection, threat hunting and incident response
.