Google Cloud Security Engineer Jobs in Iowa

Required licensures, professional certifications, and/or Board certifications as applicable

Experience with audits and frameworks such as SOX, SOC1/2, HITRUST, NIST

Certified Information Systems Security Professional (CISSP) and or Certified Information Systems Auditor (CISA) certification preferred.

Expertise in modern tooling technologies such as SIEMs, DLPs, NDRs, IPS/IDSs, IAM, SSO

Expertise in modern cloud-based infrastructure such as but not limited to AWS, Azure and Google cloud technologies

Preferred AWS Certified Security Specialty

EXPERIENCE, SKILL and ABILITY REQUIREMENTS:

Maintain the implementation of Google Cloud services such as GKE, Secret Manager, Cloud Storage, GCP Roles.

Manage and maintain Compute Engine patching through Microsoft SCCM, WSUS, and cloud native patching tools.

Manage cloud environments in accordance with company security guidelines.

7 years of experience in supporting mid-size data center preferred.

7 years of experience in Supporting cloud or hybrid infrastructure required.

Experience in threat detection, monitoring, log management, incident response, and forensics.

Experience in IAM, secrets management, encryption technologies, OS security hardening, SaaS services hardening, and container security.

Design and manage security monitoring and threat detection systems for cloud environments.

Develop incident response tools/capabilities and lead forensics investigations.

Support compliance/certification activities and participate in security audits/reviews.

BS/MS in computer science/engineering or equivalent work experience.

Experience using configuration management tools, such as Ansible

Identify vulnerabilities and risks associated to cloud deployments and CI/CD pipelines

Collaborate with Engineers and Product Managers to recommend best security practices and help identify gaps in cloud deployments

Strong experience with Python and Bash scripting

Hands-on experience with infrastructure-as-code technologies, such as Terraform

Hands-on experience deploying and using multiple AWS cloud security products, such as Security Hub, GuardDuty, Inspector and WAF

Experience architecting identity management or device trust mechanisms

Instruments and deploys identity management, device trust, and operating system hardening controls

Experience with modern adversary tradecraft and mitigating controls

Experience developing and implementing defensive controls around Windows, MacOS, Linux and SaaS applications

Experience with AWS or Azure security ecosystem and tooling

Experience conducting security architecture or design reviews around custom business applications