Lead and deliver Google Cloud security architecture, posture assessments, and operationalization. Advise on GCP security strategy, implement Security Command Center and cloud-native security tooling, integrate findings into SIEM/SecOps, guide AI workload security, produce executive reports and remediation roadmaps, and mentor consultants while driving repeatable methodologies and delivery quality.
About Coalfire
Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.
But that’s not who we are – that’s just what we do.
We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.
Why Join Us
We’re looking for a Senior Google Cloud Security Consultant to serve as a senior advisor, technical architect, and delivery leader for enterprise GCP security engagements. This role helps clients design, secure, deploy, and operationalize Google Cloud environments while translating business risk, compliance needs, and emerging technology requirements into scalable security programs.
What You'll Do
- Lead secure Google Cloud architecture design and reviews across IAM, networking, workload protection, data protection, logging, monitoring, and compliance
- Advise enterprise customers on GCP security strategy aligned to business risk, regulatory requirements, and operating priorities
- Lead Google Cloud security posture assessments to identify high-impact risks, misconfigurations, control gaps, and operational weaknesses
- Advise customers on Wiz use cases such as CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows
- Develop executive-ready findings, prioritized remediation roadmaps, and maturity-based security improvement plans
- Lead Security Command Center and Security Command Center Enterprise implementation, configuration, tuning, and operationalization
- Integrate Security Command Center findings into vulnerability management, compliance, security operations, and executive risk reporting workflows
- Advise customers on Google SecOps, Chronicle, SIEM strategy, cloud telemetry strategy, detection engineering, and SOC workflow design
- Support SIEM modernization and migration planning, including log source rationalization, detection migration, alert tuning, and operational transition
- Help customers move from fragmented monitoring approaches into scalable, cloud-native security operations models
- Own complex technical workstreams from discovery through delivery, including technical direction, scope, risks, and stakeholder coordination
- Translate technical security findings into clear business risks, investment priorities, and actionable recommendations for senior leaders
- Guide customer teams through secure Google Cloud design, configuration, deployment, and operational maturity decisions
- Advise on Vertex AI and AI workload security, including identity, access control, data protection, governance, logging, and monitoring
- Create architecture diagrams, assessment deliverables, roadmaps, implementation documentation, and operational runbooks
- Develop repeatable methodologies, assessment frameworks, implementation patterns, reference architectures, and reusable technical assets
- Mentor consultants and help raise the overall capability of the Google Cloud Security practice
- Provide technical leadership during client reviews, executive briefings, architecture discussions, and operational meetings
- Contribute to process improvement and automation initiatives that improve consistency, scalability, and delivery quality
WORK ENVIRONMENT/TRAVEL REQUIRED:
Remote working environment with up to 25% travel
What You'll Bring
- 6 years of security consulting experience spanning various domains with at least 2 years experience directly working as a Google Cloud consultant.
- Proven track record delivering Google Cloud security architecture, posture modernization, and operationalization outcomes from discovery through handover.
- Hands-on leadership in cloud security projects across security, cloud, DevOps, architecture, compliance, and operations teams.
- Documented success integrating cloud-native security platforms, SIEM, CNAPP/CSPM, logging, monitoring, vulnerability management, and SOC workflows.
- History working under regulatory or industry frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, PCI, CMMC, or similar standards.
- Deep experience designing, securing, deploying, and operationalizing Google Cloud environments.
- Strong expertise in Google Cloud security architecture, IAM, networking, logging, monitoring, data protection, workload security, and compliance-oriented design.
- Hands-on experience with Google Cloud security services, including Security Command Center or equivalent cloud-native security platforms.
- Experience leading cloud security posture assessments, architecture reviews, or enterprise cloud security modernization efforts.
- Proven ability to lead complex technical engagements with multiple stakeholders, competing priorities, and enterprise-scale environments.
- Highly adaptable consulting mindset with the ability to move between strategy, architecture, implementation, delivery leadership, and executive advisory work.
- Excellent communication, organizational, and problem-solving skills, including the ability to brief executives and guide technical teams.
- Strong documentation skills for creating diagrams, assessment reports, roadmaps, implementation plans, written recommendations, and supporting materials.
- Critical thinking skills to balance security requirements against business objectives, operational realities, and customer maturity.
- Proven track record adapting quickly and efficiently in fast-paced, dynamic customer environments.
REQUIRED CERTIFICATIONS:
Google Cloud Professional Cloud Security Engineer or Professional Cloud Architect
Google Cloud Professional Security Operations Engineer or equivalent Google Cloud security experienceBonus Points
- Google Cloud certifications: Professional Cloud Security Engineer, Professional Security Operations Engineer, or Professional Cloud Architect.
- Security Command Center Enterprise: Experience implementing, configuring, tuning, or operationalizing SCC Enterprise.
- Wiz experience: Experience with CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows.
- Google SecOps and SIEM modernization: Experience with Chronicle, SIEM architecture, telemetry strategy, detection engineering, or SIEM migration.
- Vertex AI security: Experience advising on AI governance, workload isolation, access controls, logging, monitoring, and secure deployment patterns.
- Practice development: Ability to create reusable methodologies, delivery accelerators, reference architectures, and practice-level intellectual property.
PREFERRED CERTIFICATIONS/SKILLS (not required):
Wiz, Google SecOps/Chronicle, SIEM migration, Vertex AI security, Terraform, or related cloud security skillsWhy You’ll Want to Join Us
At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.
Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.
At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at [email protected].
Similar Jobs
Artificial Intelligence • Big Data • Healthtech • Software • Biotech
Leads end-to-end IVD, companion diagnostic, clinical trial assay, tumor profiling, and SaMD development programs. Aligns internal cross-functional teams and biopharma partners across strategy, validation, clinical operations, regulatory submission, manufacturing, and commercialization. Owns governance, milestones, budgets, resources, risks, and partner relationships while delivering programs through regulatory approval or pivotal clinical trials.
Top Skills:
Analytical ValidationAssay DevelopmentBioinformaticsBlaClinical ValidationCompanion Diagnostics (Cdx)Design ControlsEu IvdrFda Regulatory RequirementsIndIvdMaaNdaPhase I/Ii/IiiSoftware As A Medical Device (Samd)
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Lead product marketing strategy and go-to-market execution for Falcon Exposure Management. Develop positioning, messaging, launches, thought leadership, web strategy, and field enablement while partnering with product, sales, marketing, and executive teams. Translate cybersecurity capabilities into customer value and business outcomes, guide market education, analyze buyers and competitors, and strengthen CrowdStrike’s category leadership. The role requires deep exposure management expertise, strong cybersecurity knowledge, exceptional communication skills, and 12–15+ years of relevant experience.
Top Skills:
AIB2B SaasCloud SecurityCybersecurityEnterprise SoftwareExternal Attack Surface ManagementFalcon Exposure ManagementIdentity SecuritySecurity OperationsVulnerability Management
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Lead program management for CrowdStrike’s Office of Adversary Strategy, coordinating complex cross-functional projects from scoping through delivery. Responsibilities include managing schedules, dependencies, risks, metrics, communications, change management, process improvements, and escalations. The role partners with technical teams and leadership, applies Agile project management practices, coaches teams through obstacles, and uses AI technologies to improve decision-making, workflows, and business outcomes.
Top Skills:
AgileArtificial IntelligenceChatgptClaudeExcelGeminiGenerative AiJIRAKanbanScaled Agile FrameworkScrumSystems Development Lifecycle
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
