Job Summary
Job Description: Security Compliance Engineer (GCP / CEL Specialist) (2HC)Location: India RemoteExperience Level: Mid-to-Senior (4+ years)Role SummaryWe are seeking a Security Compliance Engineer (GCP / CEL Specialist) to lead the technical design, authoring, and deployment of automated cloud controls and vulnerability detection logic across our Google Cloud Platform (GCP) enterprise footprint.In this role, you will bridge the gap between regulatory compliance requirements and technical cloud infrastructure. You will analyze Google Cloud Asset Inventory (CAI) schemas, author high-precision Common Expression Language (CEL) evaluation rules, configure Custom Cloud Controls within Compliance and Audit frameworks, and ensure continuous, automated evidence collection across production boundaries for Key Security Idicators.Key ResponsibilitiesQuery and analyze Google Cloud Asset Inventory (CAI) resource schemas to define precise pass/fail criteria for misconfigurations, drift, and security vulnerabilities.Map high-level compliance controls (NIST, CIS, ISO) to actionable resource configurations and API properties.Author, optimize, and test custom Common Expression Language (CEL) expressions to evaluate resource compliance and security posture.Tune CEL logic to eliminate false positives (FPs), avoid false negatives, and handle edge cases or schema drift.Package individual rules into Custom Cloud Controls and bundle them into Custom Frameworks within Audit Manager and Compliance Manager.Deploy, maintain, and enforce control frameworks hierarchically across GCP Organizations, Folders, and Projects.Build synthetic compliant and non-compliant test fixtures in sandbox environments to validate rule logic prior to production release if required.Troubleshoot execution issues, resolve Skipped Rule exceptions, and ensure accurate evidence capture.Drive peer code reviews, automated linting/testing, and progressive deployment across staging and multi-region production environments.Configure and maintain telemetry pipelines using Cloud Logging sinks, Fluent Bit, or Vector collectors across VM instances, GKE/Kubernetes clusters, and control-plane APIs if requiredDesign and apply least-privilege Cloud IAM roles and bindings for service accounts running compliance and auditing tooling if required..Qualifications & SkillsRequiredExperience: 5+ years of hands-on experience in Cloud Security Engineering, DevSecOps, Infrastructure Security, or Cloud Compliance Automation.CEL Proficiency: Advanced, hands-on experience writing and debugging Common Expression Language (CEL) for GCP policies, Kubernetes admission controllers, or similar rule engines.GCP Security Stack: Deep domain expertise with Google Cloud Platform, specifically:Google Cloud Asset Inventory (CAI)Security Command Center (SCC)Cloud Audit Logs & Cloud LoggingCloud IAM & VPC Service Controls (VPC-SC)Scripting / Coding: Working proficiency in at least one modern language: Python, Go, or Policy-as-Code engines (Rego / Open Policy Agent).Compliance Frameworks: Strong working knowledge of automated compliance mapping against standards such as NIST SP 800-53 Rev 5, CIS GCP Foundations Benchmarks, or SOC 2 Type II.Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.Preferred / Nice-to-HaveExperience managing tamper-proof audit trails (e.g., Cloud Storage WORM / Bucket Lock policies, BigQuery analytics, Pub/Sub event-driven pipelines).Experience with container orchestration platforms (GKE / Borg / Kubernetes) and runtime security controls.Google Cloud Certifications:Google Professional Cloud Security EngineerGoogle Professional Cloud ArchitectPrior experience working in high-scale, regulated environments (FinTech, Healthcare, or SaaS hyperscalers).
Key Responsibilities
Job Description: Security Compliance Engineer (GCP / CEL Specialist) (2HC)Location: India RemoteExperience Level: Mid-to-Senior (4+ years)Role SummaryWe are seeking a Security Compliance Engineer (GCP / CEL Specialist) to lead the technical design, authoring, and deployment of automated cloud controls and vulnerability detection logic across our Google Cloud Platform (GCP) enterprise footprint.In this role, you will bridge the gap between regulatory compliance requirements and technical cloud infrastructure. You will analyze Google Cloud Asset Inventory (CAI) schemas, author high-precision Common Expression Language (CEL) evaluation rules, configure Custom Cloud Controls within Compliance and Audit frameworks, and ensure continuous, automated evidence collection across production boundaries for Key Security Idicators.Key ResponsibilitiesQuery and analyze Google Cloud Asset Inventory (CAI) resource schemas to define precise pass/fail criteria for misconfigurations, drift, and security vulnerabilities.Map high-level compliance controls (NIST, CIS, ISO) to actionable resource configurations and API properties.Author, optimize, and test custom Common Expression Language (CEL) expressions to evaluate resource compliance and security posture.Tune CEL logic to eliminate false positives (FPs), avoid false negatives, and handle edge cases or schema drift.Package individual rules into Custom Cloud Controls and bundle them into Custom Frameworks within Audit Manager and Compliance Manager.Deploy, maintain, and enforce control frameworks hierarchically across GCP Organizations, Folders, and Projects.Build synthetic compliant and non-compliant test fixtures in sandbox environments to validate rule logic prior to production release if required.Troubleshoot execution issues, resolve Skipped Rule exceptions, and ensure accurate evidence capture.Drive peer code reviews, automated linting/testing, and progressive deployment across staging and multi-region production environments.Configure and maintain telemetry pipelines using Cloud Logging sinks, Fluent Bit, or Vector collectors across VM instances, GKE/Kubernetes clusters, and control-plane APIs if requiredDesign and apply least-privilege Cloud IAM roles and bindings for service accounts running compliance and auditing tooling if required..Qualifications & SkillsRequiredExperience: 5+ years of hands-on experience in Cloud Security Engineering, DevSecOps, Infrastructure Security, or Cloud Compliance Automation.CEL Proficiency: Advanced, hands-on experience writing and debugging Common Expression Language (CEL) for GCP policies, Kubernetes admission controllers, or similar rule engines.GCP Security Stack: Deep domain expertise with Google Cloud Platform, specifically:Google Cloud Asset Inventory (CAI)Security Command Center (SCC)Cloud Audit Logs & Cloud LoggingCloud IAM & VPC Service Controls (VPC-SC)Scripting / Coding: Working proficiency in at least one modern language: Python, Go, or Policy-as-Code engines (Rego / Open Policy Agent).Compliance Frameworks: Strong working knowledge of automated compliance mapping against standards such as NIST SP 800-53 Rev 5, CIS GCP Foundations Benchmarks, or SOC 2 Type II.Education: Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.Preferred / Nice-to-HaveExperience managing tamper-proof audit trails (e.g., Cloud Storage WORM / Bucket Lock policies, BigQuery analytics, Pub/Sub event-driven pipelines).Experience with container orchestration platforms (GKE / Borg / Kubernetes) and runtime security controls.Google Cloud Certifications:Google Professional Cloud Security EngineerGoogle Professional Cloud ArchitectPrior experience working in high-scale, regulated environments (FinTech, Healthcare, or SaaS hyperscalers).