Senior Cloud Security Engineer (GCP)

We are looking for a

Senior Cloud Security Engineer (GCP) to join our BUX team based in

Amsterdam .

Our engineering team sits at the heart of the company. We have a well-rounded team that cares about building great products that matter. You'll be part of a modern fintech company where you can try things, break things, fix them, and learn fast. Your work is visible, your input matters, and you helps hape both the product and how we build it. We stay close to what's happening in investing and fintech, and we share what we learn. It's a place where you can stretch your skills, contribute to something real, and grow alongside people who take their craft seriously and enjoy building things together.

What you will do

In a fintech environment, security is not just about protecting systems; it's about safeguarding user trust, ensuring regulatory compliance, and maintaining the integrity of financial operations. You'll have the opportunity to strengthen BUX's security posture, implement cutting-edge security solutions, and drive security awareness across our engineering organisation.

As a Google Cloud Security Expert, you will be the security subject matter expert for our engineering teams. This could mean:

Strengthen the BUX security posture through proactive risk management and continuous improvement

Implement and manage Google Cloud Security Command Center Enterprise

Configure and maintain security monitoring, threat detection and alerting

Conduct regular security assessments and vulnerability scans

Develop and maintain security dashboards for visibility across cloud assets

Implement and maintain security standards across the organisation

Define and document security policies, standards and best practices

Establish secure development guidelines and support teams in adoption

Ensure compliance with regulatory requirements and industry standards (SOC 2, ISO 27001, GDPR, DORA)

Work with the platform team to integrate security into CI/CD pipelines

Support engineering teams with security questions, issues and guidance

Act as the security subject matter expert for development teams

Review and advise on security aspects of system designs and architectures

Assist with security incident investigation and response

Provide security training and awareness programs for engineering staff

Manage cloud security operations

Configure and tune threat detection rules and security alerts

Develop automated response playbooks for common security scenarios

Monitor and respond to security findings, vulnerabilities and misconfigurations

Coordinate with external security partners and auditors as needed

Drive continuous security improvement

Stay current with emerging threats, vulnerabilities and security technologies

Evaluate and recommend security tools and solutions

Track security metrics and report on security posture improvements

Includes on-call duties for security incidents

Our tech stack

Java, Kotlin, Spring Boot, Google Cloud Platform (GCP), Kubernetes, Terraform, GitHub Actions, SecurityCommand Center Enterprise, SIEM/SOAR platforms, Kafka, CloudSQL, PostgreSQL, Cassandra, Elasticsearch

What you need to succeed

We are looking for you if you are passionate about security, you have strong technical and communication skills, and you thrive in a collaborative fintech environment.

Furthermore, we require:

Senior / Staff level experience in cloud security

Expert knowledge of Google Cloud Platform (GCP) security

Hands-on experience with Google Cloud Security Command Center Enterprise (SCC Enterprise)

Strong knowledge of SIEM/SOAR platforms and security operations

Experience with cloud security posture management and compliance frameworks

Knowledge of threat detection, vulnerability management and incident response

Understanding of regulatory compliance requirements (e.g., SOC 2, ISO 27001, GDPR, DORA)

Experience with Infrastructure as Code security (Terraform, Kubernetes)

Strong communication skills to collaborate across engineering teams

Ability to translate complex security concepts for technical and non-technical audiences

Nice to have

Security certifications (e.g., CISSP, CCSP, GCSA, GIAC)

Experience with AWS or Azure in addition to GCP

Knowledge of DevSecOps practices and tooling

Experience with container security and Kubernetes security best practices

Familiarity with penetration testing and ethical hacking techniques

Experience in regulated industries, particularly fintech or financial services

Knowledge of secure coding practices and application security testing (SAST/DAST)

Why join BUX as a Google Cloud Security Expert?

You will shape the security strategy for a high-growth fintech company that impacts millions of users

You will work with modern cloud technologies and have the freedom to introduce security tools and practices

You'll collaborate with intelligent, passionate peers who value security and continuous improvement

You'll be part of a company that values your ideas and encourages innovation at every level

You will help build secure products that democratize investing and make a real difference in people’s financial lives

You will have the opportunity to establish security best practices from the ground up as we scale

#J-18808-Ljbffr