GCP Infra Security (GCP + AI+ DevSecOps) - Consultant

Summary

Position Summary Cyber Deloitte Cyber understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful insights to help our clients navigate the ever-changing threat landscape. Through powerful insights and managed services that simplify complexity, we enable businesses to operate with resilience, grow with confidence, and proactively manage to secure achievements.

Position Summary Level: Solution Advisor

Work you’ll do: As a Consultant, you will be supporting the clients with their Cyber needs specifically helping them protect and secure their Google Cloud Platform (GCP) infrastructure . This will include:

• Assist in designing and implementing secure Google Cloud Platform infrastructure solutions under the guidance of senior consultants and managers.
• Support security assessments, threat modeling, and risk analysis activities for client GCP environments.
• Help review and update Identity and Access Management (IAM) policies, service account configurations, VPC architectures, and firewall rules.
• Contribute to integrating security tools and controls into CI/CD pipelines and DevOps workflows.
• Support the configuration and tuning of cloud-native security services, such as VPC Service Controls, Cloud Armor, IAM, and Security Command Center.
• Help develop and maintain secure Infrastructure-as-Code (IaC) templates using tools like Terraform or Deployment Manager.
• Assist in implementing security controls and processes to help client environments meet relevant security standards and frameworks (e.g., ISO 27001, NIST, CIS, HIPAA, PCI-DSS).
• Collaborate with client stakeholders and internal teams to align security activities with business objectives.
• Help prepare documentation and training materials to support client teams in managing their GCP security posture.
• Support GCP Security, Compliance & Controls initiatives, including governance, identity, network security, and data protection.
• Understanding of Wiz for Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), container and Kubernetes security, vulnerability management, and risk prioritization.
• Assist in securing AI and GenAI workloads on GCP, including Vertex AI and Gemini-based environments, by supporting the implementation of controls across access management, data protection, prompt security, and logging and monitoring.
• Contribute to the secure operation of AI/ML services by leveraging GCP native and AI assisted security capabilities, including Security Command Center insights, threat detection, and risk prioritization.

The Team: Enterprise Security teams embed security in all aspects of digital transformation by securing a client’s “technical backbone” while also enabling secure digital transformation. Services include security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products. Examples of work include Secure by Design, Cloud Security Orchestration & Automation, Core Infrastructure Security, and Secure Software Enablement.

Qualifications Must Have Skills/Project Experience/Certifications:

• 4+ years of experience in cloud security or cloud infrastructure, with hands-on exposure to Google Cloud Platform (GCP) and its security features.
• Familiarity with designing and implementing secure GCP architectures, preferably as part of a team.
• Understanding of cloud security principles, such as least-privilege access and zero-trust concepts.
• Experience with GCP networking, IAM, data protection and related security controls.
• Exposure to infrastructure-as-code tools (e.g., Terraform, Cloud Deployment Manager).
• Experience working with CI/CD pipelines and integrating security controls.
• Proficiency with scripting languages (e.g., Python, Bash) for automation tasks.
• Knowledge of container security (e.g., GKE, Kubernetes RBAC, image scanning) is a plus.
• Strong communication and teamwork skills, with the ability to contribute to client discussions and documentation.
• Understanding of AI/GenAI security on GCP, including Vertex AI and Gemini-based environments, with knowledge of access control, data protection, prompt security, and logging and monitoring practices.
• Familiarity with AI governance, responsible AI, and compliance requirements, along with GCP-native security capabilities to support model risk management, threat detection, and risk prioritization across AI/ML solutions.

Good to Have Skills/Project Experience/Certifications:

• Relevant security certifications (e.g., GCP Associate Cloud Engineer, GCP Professional Cloud Security Engineer, CompTIA Security+) are a plus.
• Awareness of Vertex AI, Generative AI, and AI security concepts, including governance, data privacy, and responsible AI practices.
• Familiarity with security frameworks such as NIST, CIS, or MITRE ATT&CK, and applying them to GCP environments.

Education:

• Bachelor's degree or higher in Computer Science, or equivalent experience.

Location:

• Bangalore, Hyderabad, Pune, Chennai, Kolkata #FY27CyberCampaign #CyberEnterpriseSecurity

Our purpose Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .

Benefits To Help You Thrive At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters. Requisition code: 352729