Senior GCP Security Engineer
Dentsply Sirona, Inc.15 days ago
Charlotte, NC, USASenior
Base Salary
$160k - $180k/yr
Responsibilities
- Define and implement secure GCP reference architectures, landing zones, organization and policy guardrails, identity controls, network segmentation, encryption, logging, and reusable security patterns.
- Engineer preventive and detective cloud security controls using automation, infrastructure-as-code, baseline policies, configuration validation, and continuous compliance checks.
- Integrate security controls into CI/CD pipelines and deployment workflows, including policy checks, IaC validation, secrets detection, and artifact or image scanning.
- Administer and mature the Google Security Operations/Chronicle SIEM through data ingestion, log onboarding, parsing, normalization, content management, access controls, dashboards, and reporting.
- Develop, tune, and maintain high-fidelity detections and analytics based on threat intelligence and observed attacker techniques while reducing false positives.
- Lead threat modeling, architecture risk reviews, security reviews, and remediation of critical or high cloud security findings across GCP services.
- Partner with Incident Response, Threat Hunting, Cloud Engineering, platform, and application teams to investigate cloud events and improve telemetry and detections.
- Support internal and external audits by producing evidence for logging, access governance, encryption, vulnerability management, and change control.
- Develop security standards, reusable modules, patterns, runbooks, and documentation, and contribute to resilience improvements and lessons learned.
Requirements
- Bachelor's degree or higher in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field, or equivalent practical experience.
- 7+ years of professional cybersecurity experience with significant hands-on cloud security architecture and engineering experience.
- 3+ years of experience securing Google Cloud Platform environments across identity, network security, encryption, and logging or monitoring.
- Hands-on experience administering or engineering detections in a modern SIEM; Google Security Operations/Chronicle is preferred, with comparable SIEM experience acceptable.
- Demonstrated experience partnering with cloud platform and application teams to deliver security improvements through engineering, automation, and standards.
- Knowledge of least privilege, defense-in-depth, secure network design, encryption, secure delivery practices, GCP security capabilities, security posture management, logging and monitoring, and key management.
- Experience with security automation, infrastructure-as-code such as Terraform or equivalent, and scripting such as Python or equivalent.
- Knowledge of detection engineering fundamentals including log onboarding, parsing and normalization, query languages, alert tuning, and dashboarding.
- Experience with threat modeling, security reviews, and translating risk into practical engineering requirements.
- Strong communication and cross-functional coordination skills.
- Preferred certifications include Google Professional Cloud Security Engineer, CSSP, CISSP, relevant GIAC certifications, or equivalent credentials.
Benefits
- Hybrid role requiring work from the Charlotte, North Carolina or York, Pennsylvania office.
- Professional development opportunities and a high-performance, empowering culture.
- Equal Opportunity employment and disability accommodation support are provided.
Categories
About Dentsply Sirona, Inc.
Dentsply Sirona designs and manufactures professional dental equipment, software, and consumables for dentists, orthodontists, endodontists, and dental labs. Its portfolio spans imaging systems, CAD/CAM and 3D printing workflows, implants, endodontic instruments, preventive/restorative materials, and education and services, sold through direct sales and distributors worldwide. Founded in 1899 and headquartered in Charlotte, North Carolina, the company is publicly traded on NASDAQ under the symbol XRAY.