Principal Google Cloud Security Consultant (GCP and Wiz)

Role Summary

We’re looking for a Principal Google Cloud Security Consultant to serve as a senior advisor, technical architect, and delivery leader for enterprise GCP security engagements. This role helps clients design, secure, deploy, and operationalize Google Cloud environments while translating business risk, compliance needs, and emerging technology requirements into scalable security programs.

Responsibilities

• Lead secure Google Cloud architecture design and reviews across IAM, networking, workload protection, data protection, logging, monitoring, and compliance
• Advise enterprise customers on GCP security strategy aligned to business risk, regulatory requirements, and operating priorities
• Lead Google Cloud security posture assessments to identify high-impact risks, misconfigurations, control gaps, and operational weaknesses
• Advise customers on Wiz use cases such as CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows
• Advise customers on Google SecOps, Chronicle, SIEM strategy, cloud telemetry strategy, detection engineering, and SOC workflow design
• Develop executive-ready findings, prioritized remediation roadmaps, and maturity-based security improvement plans
• Lead Security Command Center and Security Command Center Enterprise implementation, configuration, tuning, and operationalization
• Integrate Security Command Center findings into vulnerability management, compliance, security operations, and executive risk reporting workflows
• Support SIEM modernization and migration planning, including log source rationalization, detection migration, alert tuning, and operational transition
• Help customers move from fragmented monitoring approaches into scalable, cloud-native security operations models
• Own complex technical workstreams from discovery through delivery, including technical direction, scope, risks, and stakeholder coordination
• Translate technical security findings into clear business risks, investment priorities, and actionable recommendations for senior leaders
• Guide customer teams through secure Google Cloud design, configuration, deployment, and operational maturity decisions
• Advise on Vertex AI and AI workload security, including identity, access control, data protection, governance, logging, and monitoring
• Create architecture diagrams, assessment deliverables, roadmaps, implementation documentation, and operational runbooks
• Develop repeatable methodologies, assessment frameworks, implementation patterns, reference architectures, and reusable technical assets
• Mentor consultants and help raise the overall capability of the Google Cloud Security practice
• Provide technical leadership during client reviews, executive briefings, architecture discussions, and operational meetings
• Contribute to process improvement and automation initiatives that improve consistency, scalability, and delivery quality

Requirements

Bonus Points

• Wiz, Google SecOps/Chronicle, SIEM migration, Vertex AI security, Terraform, or related cloud security skills

Why You’ll Want to Join Us

At Coalfire, you’ll find the support you need to thrive personally and professionally. In many cases, we provide a flexible work model that empowers you to choose when and where you’ll work most effectively – whether you’re at home or an office.

Regardless of location, you’ll experience a company that prioritizes connection and wellbeing and be part of a team where people care about each other and our communities. You’ll have opportunities to join employee resource groups, participate in in-person and virtual events, and more. And you’ll enjoy competitive perks and benefits to support you and your family, like paid parental leave, flexible time off, certification and training reimbursement, digital mental health and wellbeing support membership, and comprehensive insurance options.

At Coalfire, equal opportunity and pay equity is integral to the way we do business. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Coalfire is committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. To request reasonable accommodation to participate in the job application or interview process, contact our Human Resources team at HumanResourcesMB@coalfire.com .

WORK ENVIRONMENT/TRAVEL REQUIRED

Remote working environment with up to 25% travel required.

About the Company

Under FedRAMP, compliance is no longer a document—it’s a set of Key Security Indicators (KSIs): measurable security outcomes validated through automation, continuously. Coalfire organizes its delivery engineering into capability-focused teams, each owning a set of KSI domains such as identity and access management, monitoring and logging, change management, or incident recovery. We’re looking for a Cloud Engineer to go deep on a team’s domains—building the standard implementation once, making it deployable anywhere, and landing it in client environment after client environment, getting better every time. If you’re driven by a desire to innovate, excel at operational excellence, and thrive in a collaborative environment, come be part of a team committed to making the world a safer place.