GCP Cloud Security Engineer

secure code review; vulnerability identification and triage; exploitability reasoning; common classes such as injection, auth/authz, SSRF, insecure deserialization, secrets and misconfiguration; evidence\-backed verdicts.

GCP IAM, service accounts, networking, storage, workload identity, audit logging, cloud misconfigurations and least privilege; ability to judge cloud\-specific exposure.

Calibration, rubric writing, reviewer alignment, adjudication tracking, benchmark versioning and structured quality reporting. Could be covered by one of the two engineers with client oversight.