Senior Data Cloud Security Engineer
5 days ago
Phoenix, AZ, United States
Galaxy Infotech INC
Full-time
Free with email or Google
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
Free with email or Google
Role: Senior Data Security Engineer
Focus: Security assessment of Google Cloud Platform-based conversational AI, telephony, API, and backend integration architecture.
Responsibilities:
- Assess the end-to-end architecture from a data security and privacy standpoint.
- Review security controls for Google Cloud Platform Shared VPC, interconnects, service accounts, IAM, and network segmentation.
- Implement Sentinel policies for enforcing encryption standards and data access standards.
- Implement database activity monitoring and blocking rules in Google Cloud Platform.
- Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
- Produce findings report with risk ratings, gaps, and remediation recommendations.
- Review data flows across:
- Google Cloud Platform service projects
- Virtual agents / conversational AI
- Telephony platforms
- API proxies
- Datastore, BigQuery, Cloud Storage
- On-prem / Amex systems of record
- Identify risks related and implement controls related to:
- Blocking customer data exposure
- PII handling
- Encryption in transit and at rest
- Secrets and key management, Users and NHI authentication
- Database activity logging, monitoring, and auditability
- Data retention and deletion
Required Skills
- Strong experience in cloud security architecture, preferably Google Cloud Platform.
- Hands-on knowledge of:
- Google Cloud Platform IAM
- VPC / Shared VPC
- Cloud Run / GKE
- BigQuery
- Cloud Storage
- Datastore / Firestore
- Cloud KMS / Secret Manager
- Experience assessing data protection controls for PII, PCI, or regulated customer data.
- Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication.