Principal Google Cloud Security Consultant

Responsibilities

• Lead secure Google Cloud architecture design and reviews across IAM, networking, workload protection, data protection, logging, monitoring, and compliance
• Advise enterprise customers on GCP security strategy aligned to business risk, regulatory requirements, and operating priorities
• Lead Google Cloud security posture assessments to identify high-impact risks, misconfigurations, control gaps, and operational weaknesses
• Advise customers on Google Sec Ops, Chronicle, SIEM strategy, cloud telemetry strategy, detection engineering, and SOC workflow design
• Advise customers on Wiz use cases such as CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows
• Develop executive‑ready findings, prioritized remediation roadmaps, and maturity‑based security improvement plans
• Lead Security Command Center and Security Command Center Enterprise implementation, configuration, tuning, and operationalization
• Integrate Security Command Center findings into vulnerability management, compliance, security operations, and executive risk reporting workflows
• Support SIEM modernization and migration planning, including log source rationalization, detection migration, alert tuning, and operational transition
• Help customers move from fragmented monitoring approaches into scalable, cloud‑native security operations models
• Own complex technical work streams from discovery through delivery, including technical direction, scope, risks, and stakeholder coordination
• Translate technical security findings into clear business risks, investment priorities, and actionable recommendations for senior leaders
• Guide customer teams through secure Google Cloud design, configuration, deployment, and operational maturity decisions
• Advise on Vertex AI and AI workload security, including identity, access control, data protection, governance, logging, and monitoring
• Create architecture diagrams, assessment deliverables, roadmaps, implementation documentation, and operational runbooks
• Develop repeatable methodologies, assessment frameworks, implementation patterns, reference architectures, and reusable technical assets
• Mentor consultants and help raise the overall capability of the Google Cloud Security practice
• Provide technical leadership during client reviews, executive briefings, architecture discussions, and operational meetings
• Contribute to process improvement and automation initiatives that improve consistency, scalability, and delivery quality

• 8 years of security consulting experience spanning various domains with at least 4 years experience directly working as a Google Cloud consultant.
• Proven track record delivering Google Cloud security architecture, posture modernization, and operationalization outcomes from discovery through handover.
• Hands‑on leadership in cloud security projects across security, cloud, Dev Ops, architecture, compliance, and operations teams.
• Documented success integrating cloud‑native security platforms, SIEM, CNAPP/CSPM, logging, monitoring, vulnerability management, and SOC workflows.
• History working under regulatory or industry frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, PCI, CMMC, or similar standards.
• Demonstrable client‑facing consulting experience, maintaining professionalism and clear communication in ambiguous, high‑stakes, or fast‑paced engagements.
• 6 years of security consulting experience spanning various domains with at least 2 years experience directly working as a Google Cloud consultant.
• Deep experience designing, securing, deploying, and operationalizing Google Cloud environments.
• Strong expertise in Google Cloud security architecture, IAM, networking, logging, monitoring, data protection, workload security, and compliance‑oriented design.
• Hands‑on experience with Google Cloud security services, including Security Command Center or equivalent cloud‑native security platforms.
• Experience leading cloud security posture assessments, architecture reviews, or enterprise cloud security modernization efforts.
• Proven ability to lead complex technical engagements with multiple stakeholders, competing priorities, and enterprise‑scale environments.
• Hi…