1 Robust knowledge of cloud security architecture secure configuration baselines identity controls network segmentation encryption key management logging and monitoring
2 Experience with GCP security services such as IAM Cloud Logging Cloud Monitoring Security Command Center Cloud KMS VPC Service Controls Cloud Armor and organization policies
3 Familiarity with security frameworks and compliance requirements such as NIST ISO 27001 CIS Benchmarks SOC 2 HIPAA or PCI DSS
4 Ability to assess cloud risks recommend practical remediation actions and communicate impact to technical and nontechnical stakeholders
5 Experience supporting DevSecOps practices infrastructure as code security reviews vulnerability management and security automation