• Design and implement security controls across cloud infrastructure, endpoints, identity systems and applications • Harden GCP environments including compute, networking, GKE, IAM and logging configurations • Deploy, configure, and maintain security tooling including SIEM, vulnerability scanners, EDR, and secrets management • Build automation for security operations, evidence collection and compliance reporting using Python, Terraform, and CI/CD pipelines • Develop and maintain logging and monitoring architecture to support detection, response, and audit requirements • Implement and enforce identity and access management controls, including SSO, MFA and least privilege access • Conduct vulnerability assessments and drive remediation efforts across infrastructure and applications • Support incident response activities including investigation, containment, and root cause analysis • Collaborate with engineering teams to integrate security into development workflows and CI/CD pipelines • Document security configurations, architecture decisions, and runbooks • Support compliance efforts by implementing technical controls required for CMMC, FedRAMP, ITAR and DFARS