Summary

Position Summary

Cyber

Deloitte Cyber understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful insights to help our clients navigate the ever-changing threat landscape. Through powerful insights and managed services that simplify complexity, we enable businesses to operate with resilience, grow with confidence, and proactively manage to secure achievements.

Position Summary

Level: Senior Consultant

Work you'll do:

As a Senior Consultant you will be supporting the clients with their Cyber needs specifically helping them protect and secure their Google Cloud Platform (GCP) infrastructure . This will include:

Assist in designing and implementing secure Google Cloud Platform infrastructure solutions under the guidance of senior consultants and managers.
Support security assessments, threat modeling, and risk analysis activities for client GCP environments.
Help review and update Identity and Access Management (IAM) policies, service account configurations, VPC architectures, and firewall rules.
Contribute to integrating security tools and controls into CI/CD pipelines and DevOps workflows.
Support the configuration and tuning of cloud-native security services, such as VPC Service Controls, Cloud Armor, IAM, and Security Command Center.
Help develop and maintain secure Infrastructure-as-Code (IaC) templates using tools like Terraform or Deployment Manager.
Assist in implementing security controls and processes to help client environments meet relevant security standards and frameworks (e.g., ISO 27001, NIST, CIS, HIPAA, PCI-DSS).
Collaborate with client stakeholders and internal teams to align security activities with business objectives.
Lead and review documentation and training materials to support client teams in managing their GCP security posture.
Lead and support GCP Security, Compliance & Controls initiatives covering governance, identity, network security, monitoring, and data protection.
Experience using Wiz for Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), container and Kubernetes security, vulnerability management, and risk prioritization.
Design and implement security controls for AI/GenAI workloads on GCP, including Vertex AI and Gemini-based environments, with emphasis on access control, data isolation, prompt security, logging, and monitoring.
Guide clients in the secure implementation of AI-enabled solutions on GCP by supporting solution design, deployment, and integration across Vertex AI and related Google Cloud services.
Strengthen AI security and governance by applying controls for data privacy, model risk, compliance, and responsible AI across ML and Generative AI solutions.

The Team:

Enterprise Security teams embed security in all aspects of digital transformation by securing a client's technical backbone while also enabling secure digital transformation. Services include security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products. Examples of work include Secure by Design, Cloud Security Orchestration & Automation, Core Infrastructure Security, and Secure Software Enablement.

Qualifications

Must Have Skills/Project Experience/Certifications:

7+ years of experience in cloud security or cloud infrastructure, with hands-on exposure to Google Cloud Platform (GCP) and its security features.
Familiarity with designing and implementing secure GCP architectures, preferably as part of a team.
Understanding of cloud security principles, such as least-privilege access and zero-trust concepts.
Experience with GCP networking, IAM, data protection and related security controls.
Exposure to infrastructure-as-code tools (e.g., Terraform, Cloud Deployment Manager).
Experience working with CI/CD pipelines and integrating security controls.
Proficiency with scripting languages (e.g., Python, Bash) for automation tasks.
Knowledge of container security (e.g., GKE, Kubernetes RBAC, image scanning) is a plus.
Strong communication and teamwork skills, with the ability to contribute to client discussions and documentation.
Strong understanding of AI/GenAI implementation and security on GCP, including Vertex AI and Gemini, with knowledge of secure solution design, deployment, integration, identity and access management, data isolation, prompt security, logging, and monitoring.
Knowledge of AI governance, data privacy, responsible AI, and compliance considerations, with the ability to apply controls for model risk management, policy enforcement, and continuous risk identification using GCP-native security and AI-assisted capabilities.

Good to Have Skills/Project Experience/Certifications:

Relevant security certifications (e.g., GCP Associate Cloud Engineer, GCP Professional Cloud Security Engineer, CompTIA Security+, Vertex AI / GenAI and AI governance or security credentials such as IAPP AIG) are a plus.
Awareness of security frameworks such as NIST, CIS, or MITRE ATT&CK, and applying them to GCP, Vertex AI and AI-enabled environments.

Education:

Bachelor's degree or higher in Computer Science, or equivalent experience.

Location:

Bangalore, Hyderabad, Pune, Chennai

#FY27CyberCampaign

#CyberEnterpriseSecurity

Our purpose

Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .

Benefits To Help You Thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 352734

GCP Infra Security (GCP + AI+ DevSecOps) - Senior Consultant