Cloud Security Engineer – Legacy Systems & GCP

About the role

We are looking for a seasoned Security Engineer to maintain and modernize our extensive legacy security infrastructure while leveraging Google Cloud Platform (GCP) for targeted improvements. The role blends deep expertise in traditional security controls with practical GCP knowledge to enhance our security posture.

Key responsibilities

• Assess, analyze, and mitigate vulnerabilities across legacy firewalls, IDS/IPS, and access control systems.
• Design, implement, and manage security controls for non‑cloud‑native environments.
• Develop and maintain security policies, standards, and procedures aligned with industry best practices.
• Monitor, investigate, contain, and remediate security incidents affecting legacy assets.
• Provide expert support and troubleshooting for legacy security infrastructure.
• Collaborate with cross‑functional teams to securely integrate new technologies.
• Integrate legacy security logs with GCP Security Command Center and other monitoring tools.
• Utilize GCP services for threat detection, vulnerability scanning, and selective workload migration.
• Deliver security guidance and training on legacy best practices and basic GCP security principles.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 8‑9 years of experience in security engineering with a focus on legacy systems.
• Strong knowledge of network security, operating system security, vulnerability management, incident response, cryptography, and security frameworks.
• Proven experience securing traditional firewalls, IDS/IPS, legacy OS, and security appliances.
• Solid understanding of TCP/IP, routing, and switching concepts.
• Familiarity with compliance standards such as NIST and ISO 27001.
• Excellent analytical, problem‑solving, and communication skills.

Required skills

• Google Cloud Platform (GCP) – Security Command Center, logging integration.
• Traditional firewalls, intrusion detection/prevention systems.
• Legacy operating systems and security appliances.
• Network protocols – TCP/IP, routing, switching.
• Vulnerability management tools.
• Incident response processes.
• Cryptography fundamentals.
• Security frameworks and compliance (NIST, ISO 27001).