Google Cloud Security Consultant

About Coalfire   Coalfire is on a mission to make the world a safer place by solving our clients’ hardest cybersecurity challenges. We work at the cutting edge of technology to advise, assess, automate, and ultimately help companies navigate the ever-changing cybersecurity landscape. We are headquartered in Chicago, Illinois with offices across the U.S. and U.K., and we support clients around the world.   But that’s not who we are – that’s just what we do.   We are thought leaders, consultants, and cybersecurity experts, but above all else, we are a team of passionate problem-solvers who are hungry to learn, grow, and make a difference.

Position Summary

We’re looking for a Principal Google Cloud Security Consultant to serve as a senior advisor, technical architect, and delivery leader for enterprise GCP security engagements. This role helps clients design, secure, deploy, and operationalize Google Cloud environments while translating business risk, compliance needs, and emerging technology requirements into scalable security programs.

What You'll Do

• Lead secure Google Cloud architecture design and reviews across IAM, networking, workload protection, data protection, logging, monitoring, and compliance
• Advise enterprise customers on GCP security strategy aligned to business risk, regulatory requirements, and operating priorities
• Lead Google Cloud security posture assessments to identify high-impact risks, misconfigurations, control gaps, and operational weaknesses
• Advise customers on Wiz use cases such as CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows
• Advise customers on Google SecOps, Chronicle, SIEM strategy, cloud telemetry strategy, detection engineering, and SOC workflow design
• Develop executive-ready findings, prioritized remediation roadmaps, and maturity-based security improvement plans
• Lead Security Command Center and Security Command Center Enterprise implementation, configuration, tuning, and operationalization
• Integrate Security Command Center findings into vulnerability management, compliance, security operations, and executive risk reporting workflows
• Support SIEM modernization and migration planning, including log source rationalization, detection migration, alert tuning, and operational transition
• Help customers move from fragmented monitoring approaches into scalable, cloud-native security operations models
• Own complex technical workstreams from discovery through delivery, including technical direction, scope, risks, and stakeholder coordination
• Translate technical security findings into clear business risks, investment priorities, and actionable recommendations for senior leaders