GCP Data Security Specialist

GCP Data Security Specialist

Location: Hybrid – Phoenix, AZ

Job Summary

We are seeking an experienced Cybersecurity Specialist / Data Security Architect with a strong focus on Google Cloud Platform (GCP). In this role, you will lead a comprehensive security assessment of a complex GCP-based ecosystem, covering conversational AI, telephony integrations, API management, and enterprise backend systems.
The ideal candidate will have deep expertise in cloud security controls, data protection for regulated data (PII/PCI), and threat modeling for modern cloud-native and AI-enabled architectures.

Key Responsibilities

• Data Security & Privacy Assessment: Evaluate the end-to-end architecture from a data security, privacy, and compliance standpoint.
• Data Flow Analysis: Review data movement across GCP service projects, virtual agents, conversational AI layers, telephony platforms, API proxies, storage layers (Datastore, BigQuery, Cloud Storage), and on-premises / enterprise systems of record.
• Risk & Vulnerability Identification: Identify and document risks related to customer data exposure, PII handling, authentication/authorization gaps, encryption standards, secrets/key management, auditability, and cross-boundary data movement.
• Infrastructure Security Review: Examine security controls for GCP Shared VPC, hybrid interconnects, service accounts, IAM, and network segmentation.
• Policy & Control Enforcement: Implement Sentinel policies to enforce encryption standards and deploy database activity monitoring and blocking rules within GCP.
• AI Security Assessment: Evaluate AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access security.
• Reporting: Produce detailed findings reports complete with risk ratings, security gaps, and actionable remediation recommendations.

Required Skills & Qualifications

• Strong Cloud Security Experience: Extensive background in cloud security architecture, with a primary focus on Google Cloud Platform (GCP).
• Core GCP Security & Infrastructure Tools (Hands-on Knowledge):
  • GCP IAM & Service Accounts
  • VPC / Shared VPC & Network Segmentation
  • Cloud Run / GKE
  • BigQuery & Cloud Storage
  • Datastore / Firestore
  • Cloud KMS / Secret Manager
• Data Protection & Compliance: Proven experience assessing data protection controls for sensitive and regulated customer data (PII, PCI, etc.).
• API & Network Security: Comprehensive knowledge of API security (OAuth, mTLS, token handling, API gateways, service-to-service auth) and network security (private connectivity, firewalls, hybrid interconnects).
• Monitoring & Threat Modeling: Solid understanding of logging, SIEM integration, audit trails, security monitoring, threat modeling, and architecture risk reviews.

Preferred Qualifications

• Experience with conversational AI / virtual agent platforms.
• Knowledge of telephony / SIP integrations and contact center platforms.
• Familiarity with financial services security standards and frameworks (PCI DSS, NIST, ISO 27001, SOC 2).
• Understanding of AI data governance, model safety, and Generative AI (GenAI) security risks.