Preferred candidate profile The Supplier shall provide suitably qualified Cloud Cyber Security Engineers to execute remediation activities across Google Cloud Platform (GCP)
- Engineering Activities
- Activities may include, but are not limited to:
- Identity and access management remediation.
- Privileged access remediation.
- Security configuration hardening.
- Network security remediation.
- Logging and monitoring improvements.
- Cloud posture management improvements.
- Encryption and key management improvements.
- Security baseline compliance activities.
- Security policy implementation.
- Infrastructure-as-Code security remediation.
- Container and Kubernetes platform security improvements.
- Cloud-native service security remediation.
- Deliverables
- Remediation plans.
- Implemented security improvements.
- Validation evidence.
- Documentation updates.
- Risk closure recommendations.