Skip to content

Open nowFirst seen 35 hours ago

GCP Cloud Security Specialist

Abacus Consulting165 open roles

Where
Kuwait City, Kuwait
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowGCP Cloud Security SpecialistAbacus Consulting · Kuwait City, Kuwait
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Abacus Consulting's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.0%1 day
  2. 4.3%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: first seen 35 hours ago

The posting

Experience Level: Senior (5+ Years)

Languages Required: Fluent in Arabic and English (written and spoken)

Role Overview:

We are seeking an experienced GCP Cloud Security Specialist to lead the design, implementation, and management of robust security measures within Google Cloud Platform (GCP) environments. The ideal candidate will have a deep understanding of cloud security frameworks, particularly OWASP Cloud-Native Application Security Top 10, GCP Advanced API Security, and other industry best practices. This role demands proactive threat mitigation, ensuring compliance with international standards, and integrating security into all phases of the development lifecycle. Fluency in both Arabic and English is essential for effective communication with diverse stakeholders.​

Key Responsibilities:

  • Security Strategy & Compliance: Develop and implement comprehensive security strategies tailored to GCP environments, ensuring adherence to standards such as NIST, CIS, GDPR, and ISO/IEC 27017. Conduct regular audits and assessments to maintain compliance and address any deviations promptly.​
  • Identity & Access Management (IAM): Design and enforce robust IAM policies that adhere to the principle of least privilege. Implement role-based access controls to ensure secure and efficient access to resources, minimizing potential security risks.​
  • Advanced API Security Implementation: Utilize GCP's Advanced API Security features to monitor and protect APIs from security threats, including malicious clients and abuse. Analyze API traffic to identify suspicious requests and implement measures to block or flag such requests. Evaluate API configurations to ensure they meet security standards and provide recommendations for improvements.​
  • Threat Detection & Response: Utilize tools like Google Cloud Security Command Center, Google Cloud Armor, and Apigee Advanced API Security to continuously monitor for vulnerabilities and threats. Leverage Advanced API Security to detect and mitigate malicious activities, such as bot attacks and API abuse, by analyzing API traffic patterns and enforcing security actions. Develop and execute response plans to swiftly address identified risks, ensuring the integrity and security of cloud assets.​
  • Security Assessments & Risk Management: Conduct regular vulnerability scans, security assessments, and compliance reviews to identify and remediate potential security issues. Develop risk management strategies to prioritize and address security concerns effectively.​
  • DevSecOps & Automation: Integrate security best practices into the CI/CD pipelines, ensuring that security is embedded throughout the software development lifecycle. Utilize automation tools such as Terraform, Deployment Manager, and Ansible to enforce security policies consistently and efficiently.​
  • Incident Response & Remediation: Lead the investigation and resolution of security incidents within GCP environments. Develop and maintain incident response plans, conduct post-mortem analyses, and implement measures to prevent future occurrences.​
  • Security Awareness & Advisory: Serve as a subject matter expert on cloud security, providing guidance and training to internal teams. Stay abreast of emerging threats and security technologies, advising on proactive measures to enhance the organization's security posture.​

Skills & Tools:

  • GCP Security Services: Proficient in Google Cloud Security Command Center, Identity-Aware Proxy (IAP), Google Cloud Armor, and Advanced API Security features for comprehensive security management.​
  • Compliance & Governance: In-depth knowledge of regulatory frameworks and standards such as NIST, CIS, GDPR, and ISO/IEC 27017. Experience in conducting risk assessments and implementing governance structures to ensure compliance.​
  • IAM & Network Security: Expertise in role-based access control, encryption methodologies, and VPC security configurations to safeguard cloud environments.​
  • Threat Detection & Incident Response: Experience with SIEM tools, continuous monitoring solutions, and forensic analysis techniques to detect and respond to security incidents effectively.​
  • DevSecOps & Automation: Skilled in utilizing Terraform, Deployment Manager, and Ansible to automate security implementations and integrate security into DevOps workflows.​
  • Cloud Platforms: Primary expertise in GCP, with additional knowledge of AWS and Azure to support multi-cloud security strategies.​
  • OWASP Guidelines: Familiarity with OWASP Cloud-Native Application Security Top 10 and OWASP Secure Coding Practices to identify and mitigate common cloud security risks.​
  • Secrets Management: Proficiency in implementing secure methods for handling sensitive data, including encryption and secure storage solutions, as outlined in OWASP Secrets Management Cheat Sheet.​

Preferred Certifications:

  • Google Professional Cloud Security Engineer: Highly recommended to validate expertise in designing and managing secure GCP solutions.​
  • Google Professional Cloud Architect: Beneficial for demonstrating a comprehensive understanding of GCP architecture with a security-focused perspective.​
  • Other Relevant Certifications: Certifications such as AWS Certified Security Specialty and Certified Information Systems Security Professional (CISSP) are advantageous, showcasing a broad and deep understanding of cloud security principles.​

Why Join Us:

This is an exceptional opportunity to lead cloud security initiatives in a dynamic and innovative environment. You will have the autonomy to shape security strategies, work with cutting-edge technologies, and collaborate with diverse teams to protect and enhance the organization's cloud infrastructure.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Abacus Consulting's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Abacus Consulting's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Abacus Consulting's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.