Senior Data Cloud Security Engineer

Role: Senior Data Security Engineer

Focus: Security assessment of Google Cloud Platform-based conversational AI, telephony, API, and backend integration architecture.

Responsibilities:

• Assess the end-to-end architecture from a data security and privacy standpoint.
• Review security controls for Google Cloud Platform Shared VPC, interconnects, service accounts, IAM, and network segmentation.
• Implement Sentinel policies for enforcing encryption standards and data access standards.
• Implement database activity monitoring and blocking rules in Google Cloud Platform.
• Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
• Produce findings report with risk ratings, gaps, and remediation recommendations.
• Review data flows across:
  • Google Cloud Platform service projects
  • Virtual agents / conversational AI
  • Telephony platforms
  • API proxies
  • Datastore, BigQuery, Cloud Storage
  • On-prem / Amex systems of record
• Identify risks related and implement controls related to:
  • Blocking customer data exposure
  • PII handling
  • Encryption in transit and at rest
  • Secrets and key management, Users and NHI authentication
  • Database activity logging, monitoring, and auditability
  • Data retention and deletion

Required Skills

• Strong experience in cloud security architecture, preferably Google Cloud Platform.
• Hands-on knowledge of:
• Google Cloud Platform IAM
• VPC / Shared VPC
• Cloud Run / GKE
• BigQuery
• Cloud Storage
• Datastore / Firestore
• Cloud KMS / Secret Manager
• Experience assessing data protection controls for PII, PCI, or regulated customer data.
• Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.