Senior GCP Security Engineer
Role summary
We are seeking a Senior GCP Security Engineer to join our team. This role involves assessing and improving security architecture for digital and cloud environments, defining integration strategies, and developing regulatory compliance roadmaps. You will perform threat modeling, risk assessments, and vulnerability management, ensuring adherence to standards like NIST, SOC 2, GDPR, and ISO. The position requires expert-level application security knowledge (SAST, DAST, Secure Coding) and familiarity with OWASP tools and practices. Experience in the healthcare industry and with cloud platforms (GCP, Azure, AWS) is preferred. This role is crucial for maintaining the security and compliance of our digital and cloud ecosystems, supporting hospital and clinic onboarding, and addressing customer security requirements.
Key Responsibilities
- Assess existing security architecture and practices for digital and cloud environments, identifying gaps and improvement areas.
- Define and recommend integration strategies with IT systems and broader enterprise ecosystems.
- Develop and drive regulatory compliance roadmaps, including standards such as ISO, SOC 2 Type II, and SOC 3.
- Support onboarding of hospitals and clinics into the Medtronic portal and digital ecosystem by ensuring adherence to security requirements.
- Identify common compliance-related queries from healthcare providers (HCPs) and design automated response mechanisms.
- Perform threat modeling and risk assessments for digital and cloud platforms.
- Conduct vulnerability assessments, including signal monitoring and risk identification.
- Implement and align cybersecurity standards and frameworks such as NIST, SOC 2, GDPR, and ISO.
- Design and maintain secure architecture for digital and cloud ecosystems.
- Manage security risk assessment and vulnerability management processes.
- Support customer security requirements, including responding to compliance questionnaires, providing demonstrations, and integrating security controls.
Mandatory Skills & Expertise
- Application Security (SAST, DAST, Secure Coding) - Expert, hands-on experience required
- OWASP Tools & Practices - Expert, strong knowledge of OWASP Top 10
- NIST Security Framework - Expert, implementation & compliance experience
Preferred Skills
- Experience with healthcare or medical device industry security requirements
- Familiarity with cloud platforms (Azure, AWS, Google Cloud Platform) security architecture
- Strong understanding of GDPR and data privacy regulations
- Excellent communication and stakeholder management skills
Qualifications
- Bachelor&s or Master&s degree in Computer Science, Information Security, or related field
- Relevant certifications such as CISSP, CISM, CEH, or equivalent are preferred
For applications and inquiries, contact: hirings@openkyber.com