GCP Security Engineer

Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you’d like, where you’ll be supported and inspired by a collaborative community of colleagues around the world, and where you’ll be able to reimagine what’s possible. Join us and help the world’s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.

Role Description

Job Overview

We are seeking a skilled GCP Security Engineer specializing in SecDevOps to enhance our security posture across our Google Cloud Platform (GCP) environment. In this role, you will collaborate closely with development and operations teams to integrate security practices into the DevOps pipeline. Your expertise will help ensure the secure design, deployment, and management of cloud-native applications and infrastructure.

Key Responsibilities:

1. Security Integration: Embed security practices into the CI/CD pipeline, ensuring that security is a core component of the software development lifecycle.
2. Vulnerability Management: Conduct regular security assessments, vulnerability scans, and penetration testing on GCP resources to identify and mitigate security risks.
3. Infrastructure as Code (IaC): Develop and maintain secure IaC templates (e.g., Terraform, Cloud Deployment Manager) to automate provisioning and configuration of GCP resources securely.
4. Monitoring and Logging: Implement security monitoring and logging solutions, utilizing tools such as Google Cloud Security Command Center and Stackdriver to detect and respond to threats.
5. Incident Response: Collaborate with incident response teams to investigate and remediate security incidents in GCP environments.
6. Access Control: Manage and enforce identity and access management (IAM) policies, ensuring least privilege access across GCP services.
7. Compliance Assurance: Assist in ensuring compliance with relevant security standards and frameworks (e.g., CIS, NIST) within GCP.
8. Security Awareness: Provide training and support to development and operations teams on security best practices and secure coding techniques.

Qualifications:

1. Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. Advanced degree preferred.
2. 3+ years of experience in information security, with a focus on cloud security, preferably in GCP.
3. Strong knowledge of GCP security services, including IAM, VPC, Cloud Armor, and Data Loss Prevention.
4. Proficiency in scripting and automation using languages such as Python, Bash, or Go.
5. Experience with container security (e.g., Kubernetes, Docker) and CI/CD tools (e.g., Jenkins, GitLab).
6. Familiarity with security tools and frameworks for vulnerability management, logging, and monitoring.
7. Strong analytical skills and a proactive approach to problem-solving.
8. Excellent communication and collaboration skills to work effectively with cross-functional teams.
9. Relevant certifications (e.g., Google Cloud Professional Cloud Security Engineer, CISSP, or other cloud security certifications) are a plus.

Life at Capgemini

Capgemini supports all aspects of your well-being throughout the changing stages of your life and career. For eligible employees, we offer:

1. Healthcare including dental, vision, mental health, and well-being programs.
2. Financial well-being programs such as 401(k) and Employee Share Ownership Plan.
3. Paid time off and paid holidays.
4. Paid parental leave.
5. Family building benefits like adoption assistance, surrogacy, and cryopreservation.
6. Social well-being benefits like subsidized back-up child/elder care and tutoring.
7. Mentoring, coaching and learning programs.
8. Employee Resource Groups.
9. Disaster Relief.

Disclaimer

Capgemini is an Equal Opportunity Employer encouraging diversity in the workplace. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.

This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodations do not pose an undue hardship.

Capgemini is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.

Salary Transparency

Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $86129 - $127189/yearly.