- Design, implement and continuously improve security controls across enterprise Google Cloud environments.
- Design and maintain secure GCP resource hierarchies, organisation structures, folders, projects and landing-zone security controls.
- Implement and optimise identity and access controls aligned with least-privilege and Zero Trust principles.
- Engineer GCP network security capabilities, including VPC and Shared VPC designs, firewall controls, Cloud Armor and VPC Service Controls.
- Deploy, configure and optimise Google Cloud security technologies, including Security Command Center and Google Security Operations.
- Integrate Cloud Audit Logs, VPC Flow Logs, Security Command Center findings and other GCP telemetry into Microsoft Sentinel and/or Google Security Operations.
- Develop and enhance security detections, analytics, playbooks and automated response workflows.
- Support threat-hunting and incident-response teams by providing GCP security expertise, telemetry and technical integrations.
- Design, develop and maintain AI-driven security workflows and autonomous response capabilities.
- Engineer automation and orchestration solutions that reduce manual analyst effort and improve security response times.
- Develop reusable security automation frameworks using Terraform, Python, PowerShell, gcloud CLI and APIs.
- Deploy and optimise Cloud-Native Application Protection and Cloud Security Posture Management capabilities using Wiz or equivalent technologies.
- Integrate Security Posture Management insights into operational processes and CI/CD pipelines.
- Develop security metrics, dashboards and operational reporting that demonstrate the effectiveness of security capabilities.
- Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related technical field, or equivalent practical experience.
- 5+ years of hands-on cybersecurity experience across security operations, security engineering or security architecture.
- 3+ years of hands-on GCP security engineering experience within an enterprise environment.
- Strong understanding of the GCP resource hierarchy, IAM model, organisation policies and shared-responsibility model.
- Strong knowledge of GCP networking, including VPC, Shared VPC, firewall controls and network security architecture.
- Hands-on experience implementing security controls across Google Cloud environments.
- Experience with Google Security Command Center, Google Security Operations, Cloud Armor, VPC Service Controls or other GCP-native security services.
- Experience collecting and integrating Cloud Audit Logs, VPC Flow Logs and Security Command Center findings.
- Experience integrating GCP security telemetry with Microsoft Sentinel and/or Google Security Operations.
- Experience with Wiz or another Cloud-Native Application Protection or Cloud Security Posture Management platform.
- Practical experience with Terraform, including using Infrastructure as Code to deploy and manage cloud security capabilities.
- Proficiency in Python, PowerShell, gcloud CLI or comparable scripting and automation technologies.
- Experience with KQL and/or YARA-L and Unified Data Model searches within Google Security Operations.
- Experience developing APIs, security integrations, playbooks, automated workflows and orchestration solutions.
- Experience implementing and operating Microsoft security technologies, including Microsoft Sentinel, Defender XDR and Defender for Cloud.
- Strong understanding of cloud, identity, data, application, network, infrastructure and endpoint security controls.
- Strong knowledge of threat detection, incident response, vulnerability management and attack-surface reduction.
- Strong analytical, troubleshooting and communication skills in English.
- The chance to work in a top talent team
- Attractive remuneration
- Build knowledge in cutting-edge technologies
- Opportunity for continuous training, learning and certification
- Experience in an international and multicultural organization
- Work on challenging projects with clients in various industries around the globe
- Modern office environment
- Additional health insurance
- Life insurance
- 50+ benefits and services to choose from
- Hybrid working policy
KPMG Delivery Network Bulgaria is committed to building a diverse, equitable and truly inclusive company. We actively encourage diversity and inclusion, while opposing all forms of unlawful and unfair discrimination on the grounds of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex and sexual orientation. Join us, and let us write your next chapter together!
© 2026 KPMG Delivery Network Ltd., a member firm of the KPMG global organization of independent member firms affiliated with KPMG International Limited, a private English company limited by guarantee. All rights reserved. The KPMG name and logo are registered trademarks or trademarks of KPMG International.
