Cloud Security Engineer(GCP)

• Participate in the evolution of relevant guidelines and standards related to one or all major cloud platforms including workload protection, networking & infrastructure security, threat modelling, data management and any relevant areas for software and infrastructure development.
• Participate actively in the engineer community led by METRO Corporate Information Security to define best practices, align way-of-working, prioritize and execute on the needed activities across development and agile lifecycles.
• Contribute to security by default by helping to implement defined controls in CI/CD pipelines, and infrastructure operations
• Actively support platform and business teams to implement defined technical and organization measures related to security and privacy and to IT controls to ensure compliance with applicable laws and internal regulations.
• Actively support engineering teams across METRO to address identified vulnerabilities and audit findings
• Support cyber defense, enterprise architects and software engineer teams in remediation of identified risks or security alerts and vulnerabilities to reduce METRO’s exposure to such vulnerabilities and risks.

Cloud security experience in one, or more of the following:

• Oracle, Google cloud including implementing and evaluating security baselines and best practices across native services.
• Experience in infrastructure as Code and Policy as Code including tooling like Terraform and equivalent frameworks.
• Experiencing driving container security best practices including image hardening, admission control, and run-time protection
• Designing and implementing controls across cloud platforms ensuring security in build, test, and deployment.
• Cloud and platform networking security, including experience managing and configuring firewalls load balancers, segmentation, and identity driven access models.
• Building, operating, and ensuring the successful integration of security logging across cloud infrastructure and applications.
• Experience securing complex enterprise platforms such as SAP and custom develop applications.

And:

• Experience with LLMs, AI, and agentic coding platforms such as Github Co-pilot, Gemini, or Claude Code.
• Proven experience as a security subject-matter expert, mentoring and raising awareness to security mandates.