Principal Cloud Security Consultant

🕒 June 15

🇺🇸 United States – Remote

💵 $125k - $217k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 16%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Coalfire

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2001

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Coalfire is a cybersecurity services provider that helps businesses improve their security resilience and streamline regulatory compliance. The company offers expert-led services, including threat-focused cybersecurity programs, compliance automation, risk management, and security advisory services across various industries such as financial services, healthcare, retail, and technology. Coalfire is known for its hacker and defender expertise, and its platforms are designed to fortify clients' cyber resilience, reduce attack surfaces, and accelerate the achievement of compliance objectives like FedRAMP and HITRUST.

📋 Description

• Lead secure Google Cloud architecture design and reviews across IAM, networking, workload protection, data protection, logging, monitoring, and compliance • Advise enterprise customers on Google Cloud security strategy aligned to business risk, regulatory requirements, and operating priorities • Lead Google Cloud security posture assessments to identify high-impact risks, misconfigurations, control gaps, and operational weaknesses • Advise customers on Google SecOps, Chronicle, SIEM strategy, cloud telemetry strategy, detection engineering, and SOC workflow design • Advise customers on Wiz use cases such as CNAPP, CSPM, vulnerability prioritization, attack path analysis, entitlement risk, and remediation workflows • Develop executive-ready findings, prioritized remediation roadmaps, and maturity-based security improvement plans • Lead Security Command Center and Security Command Center Enterprise implementation, configuration, tuning, and operationalization • Integrate Security Command Center findings into vulnerability management, compliance, security operations, and executive risk reporting workflows • Support SIEM modernization and migration planning, including log source rationalization, detection migration, alert tuning, and operational transition • Help customers move from fragmented monitoring approaches into scalable, cloud-native security operations models • Own complex technical workstreams from discovery through delivery, including technical direction, scope, risks, and stakeholder coordination • Translate technical security findings into clear business risks, investment priorities, and actionable recommendations for senior leaders • Guide customer teams through secure Google Cloud design, configuration, deployment, and operational maturity decisions • Advise on Vertex AI and AI workload security, including identity, access control, data protection, governance, logging, and monitoring • Create architecture diagrams, assessment deliverables, roadmaps, implementation documentation, and operational runbooks • Develop repeatable methodologies, assessment frameworks, implementation patterns, reference architectures, and reusable technical assets • Mentor consultants and help raise the overall capability of the Google Cloud Security practice • Provide technical leadership during client reviews, executive briefings, architecture discussions, and operational meetings • Contribute to process improvement and automation initiatives that improve consistency, scalability, and delivery quality

🎯 Requirements

• 8 years of security consulting experience spanning various domains with at least 4 years experience directly working as a Google Cloud consultant. • Proven track record delivering Google Cloud security architecture, posture modernization, and operationalization outcomes from discovery through handover. • Hands-on leadership in cloud security projects across security, cloud, DevOps, architecture, compliance, and operations teams. • Documented success integrating cloud-native security platforms, SIEM, CNAPP/CSPM, logging, monitoring, vulnerability management, and SOC workflows. • History working under regulatory or industry frameworks such as FedRAMP, FISMA, HIPAA, HITRUST, PCI, CMMC, or similar standards. • Demonstrable client-facing consulting experience, maintaining professionalism and clear communication in ambiguous, high-stakes, or fast-paced engagements. • 6 years of security consulting experience spanning various domains with at least 2 years experience directly working as a Google Cloud consultant. • Deep experience designing, securing, deploying, and operationalizing Google Cloud environments. • Strong expertise in Google Cloud security architecture, IAM, networking, logging, monitoring, data protection, workload security, and compliance-oriented design. • Hands-on experience with Google Cloud security services, including Security Command Center or equivalent cloud-native security platforms. • Experience leading cloud security posture assessments, architecture reviews, or enterprise cloud security modernization efforts. • Proven ability to lead complex technical engagements with multiple stakeholders, competing priorities, and enterprise-scale environments. • Highly adaptable consulting mindset with the ability to move between strategy, architecture, implementation, delivery leadership, and executive advisory work. • Excellent communication, organizational, and problem-solving skills, including the ability to brief executives and guide technical teams. • Strong documentation skills for creating diagrams, assessment reports, roadmaps, implementation plans, written recommendations, and supporting materials. • Critical thinking skills to balance security requirements against business objectives, operational realities, and customer maturity. • Proven track record adapting quickly and efficiently in fast-paced, dynamic customer environments.

🏖️ Benefits

• paid parental leave • flexible time off • certification and training reimbursement • digital mental health and wellbeing support membership • comprehensive insurance options