Senior Cloud Security Engineer (GCP)

pulliWe are looking for a Senior Cloud Security Engineer (GCP) to join our BUX team based in Amsterdam /liliOur engineering team sits at the heart of the company /liliWe have a well-rounded team that cares about building great products that matter /liliYou’ll be part of a modern fintech company where you can try things, break things, fix them, and learn fast /liliYour work is visible, your input matters, and you help shape both the product and how we build it /liliWe stay close to what’s happening in investing and fintech, and we share what we learn /liliIt’s a place where you can stretch your skills, contribute to something real, and grow alongside people who take their craft seriously and enjoy building things together /liliIn a fintech environment, security is not just about protecting systems; it’s about safeguarding user trust, ensuring regulatory compliance, and maintaining the integrity of financial operations /liliYou’ll have the opportunity to strengthen BUX’s security posture, implement cutting-edge security solutions, and drive security awareness across our engineering organisation /liliAs a Google Cloud Security Expert, you will be the security subject matter expert for our engineering teams /liliStrengthen the BUX security posture through proactive risk management and continuous improvement /liliImplement and manage Google Cloud Security Command Center Enterprise /liliConfigure and maintain security monitoring, threat detection and alerting /liliConduct regular security assessments and vulnerability scans /liliDevelop and maintain security dashboards for visibility across cloud assets /liliImplement and maintain security standards across the organisation /liliDefine and document security policies, standards and best practices /liliEstablish secure development guidelines and support teams in adoption /liliEnsure compliance with regulatory requirements and industry standards (SOC 2, ISO 27001, GDPR, DORA) /liliWork with the platform team to integrate security into CI/CD pipelines /liliSupport engineering teams with security questions, issues and guidance /liliAct as the security subject matter expert for development teams /liliReview and advise on security aspects of system designs and architectures /liliAssist with security incident investigation and response /liliProvide security training and awareness programs for engineering staff /liliManage cloud security operations /liliConfigure and tune threat detection rules and security alerts /liliDevelop automated response playbooks for common security scenarios /liliMonitor and respond to security findings, vulnerabilities and misconfigurations /liliCoordinate with external security partners and auditors as needed /liliDrive continuous security improvement /liliStay current with emerging threats, vulnerabilities and security technologies /liliEvaluate and recommend security tools and solutions /liliTrack security metrics and report on security posture improvements /liliIncludes on-call duties for security incidents /li /ulh3Benefits /h3ulliWork from anywhere in the world for one month per year /liliUnlimited 1-on-1 access to on-demand coaching and mindfulness consultations with psychologists through OpenUp /liliA supportive environment that encourages continuous learning and development /liliDedicated training budget for to use towards improving current skills or learning something entirely new /liliCelebrations - we make sure to do plenty of fun stuff together, like dinner and drinks or activities like flyboarding, rafting and off-road jeep driving /li /ulpWe are looking for you if you are passionate about security, you have strong technical and communication skills, and you thrive in a collaborative fintech environmentHands-on experience with Google Cloud Security Command Center Enterprise (SCC Enterprise)You will work with modern cloud technologies and have the freedom to introduce security tools and practicesYou will have the opportunity to establish security best practices from the ground up as we scaleStrong knowledge of SIEM/SOAR platforms and security operationsYou will help build secure products that democratize investing and make a real difference in people’s financial livesAbility to translate complex security concepts for technical and non-technical audiencesKnowledge of threat detection, vulnerability management and incident responseExpert knowledge of Google Cloud Platform (GCP) securitySenior / Staff level experience in cloud securityStrong communication skills to collaborate across engineering teamsUnderstanding of regulatory compliance requirements (e.g., SOC 2, ISO 27001, GDPR, DORA)You will shape the security strategy for a high-growth fintech company that impacts millions of usersYou’ll be part of a company that values your ideas and encourages innovation at every levelExperience with Infrastructure as Code security (Terraform, Kubernetes)You’ll collaborate with intelligent, passionate peers who value security and continuous improvementExperience with cloud security posture management and compliance frameworksKnowledge of DevSecOps practices and toolingSecurity certifications (e.g., CISSP, CCSP, GCSA, GIAC)Experience with container security and Kubernetes security best practicesKnowledge of secure coding practices and application security testing (SAST/DAST)Experience with AWS or Azure in addition to GCPExperience in regulated industries, particularly fintech or financial servicesFamiliarity with penetration testing and ethical hacking techniques /p /p #J-18808-Ljbffr