GCP Network and security

• Professional Cloud Security Engineer, Knowledge of security technologies, CSP native and Third -party security tools,

• Knowledge of CSA/CCM, have technology experience in writing policy as code in Terraform Sentinel and Infra as Code in Terraform

• Strong Knowledge of App/Infra Security

• Strong knowledge and experience in DevSecOps

• Security controls and techniques on Google Cloud Platform

• Explore and deploy the components of a secure GCP solution, including Cloud Identity, the GCP Resource Manager, Cloud IAM, Google Virtual Private

• Cloud firewalls, Google Cloud Load balancing, Cloud CDN, Cloud Storage access control technologies, Stackdriver, Security Keys,

• Customer-Supplied Encryption Keys, the Google Data Loss Prevention API, and Cloud Armor.

• Mitigations for attacks at many points in a GCP-based infrastructure, including Distributed Denial-of-Service attacks, phishing attacks, and threats involving content classification

• Vulnerability, threat, attack surface, confidentiality, integrity, availability, common threat types and their mitigation strategies

• Public-key cryptography, public and private key pairs, certificates, cipher types, certificate authorities, Transport Layer Security/

• Secure Sockets Layer encrypted communication

• Public key infrastructures, security policy Basic proficiency with command-line tools and Linux operating system environments

• Systems Operations experience, deploying and managing applications, on-premises or in a public cloud environment.

• Consume centrally agreed base Client Hardened OS (Linux and Windows)

• Ensure compliance with centrally defined Security

• Ensure compliancy with Operational risk standards (E.g. Network, Firewall, OS, Logging, Monitoring, Availability, Resiliency)

• Engineering activities to implement patches provided centrally