Job Requirements

CI/CD Security Integration ("Shift-Left"): Proven ability to integrate automated security gates (SAST/DAST/SCA) into pipelines using tools like Google Cloud Build, GitHub Actions, or GitLab CI/CD.

Infrastructure as Code (IaC) & Security: Advanced proficiency with Terraform alongside automated IaC scanning tools

(e.g., Checkov, Terrascan, or Open Policy Agent (OPA)).

Container & Kubernetes Security: Hands-on experience securing containerized workloads deployed on Google Kubernetes Engine (GKE)

and managing secure image lifecycles via Google Artifact Registry.

Automation Scripting: Strong coding skills in Python, Go, or Bash to build custom security guardrails and automation scripts.

Core Certification: Active Google Cloud Professional Cloud Security Engineer certification.

Advanced Container Credentials: Holding a CKS (Certified Kubernetes Security Specialist) designation.

Broad Cloud Security Standards: Industry-recognized credentials such as CISSP, CCSP, or CSSLP (Certified Secure Software Lifecycle Professional).

Cross-Cloud/Hybrid Experience: Background in migrating workloads specifically from AWS or Azure to GCP, or managing hybrid-cloud security architectures.

Specific Third-Party Tooling: Experience with premium security platforms like Snyk,



Wiz, Prisma Cloud, SonarQube, or DefectDojo for vulnerability orchestration.

Threat Modeling: Experience conducting application threat modeling (e.g., using STRIDE or PASTA frameworks) prior to cloud migration.

Leadership & Agile: Prior experience leading or mentoring agile engineering teams, with a knack for translating complex security risks into transparent engineering requirements.

Hands-on Security Operations (SecOps) Lead to spearhead the security transformation and governance of our large-scale migration to

Google Cloud Platform (GCP). With over a decade of cybersecurity experience under your belt, you will bridge the gap between legacy security frameworks and modern, cloud-native security paradigms.

Migration Security Leadership: Define, implement, and oversee the SecOps migration roadmap, ensuring security controls are baked i into the cloud architecture from day one.

Incident Response & Threat Management: Lead the detection, isolation, and remediation of security incidents during hybrid and cloud-native phases.

GCP Security Engineering: Deploy and optimize GCP-native security tool

Work Experience

10-15Years

📌 Architect (Gurugram)
🏢 Virtusa
📍 Gurugram