Information Security Engineer (GCP)

Arden University

1d•Remote

About The Position

The Information Security Engineer (GCP) sits within Arden University’s Cyber & Information Security Team in the IT Department. The role strengthens the university’s information security posture by implementing, configuring and administering technical security controls, designing and implementing security technologies, and collaborating with IT teams to ensure new solutions integrate with existing systems and security infrastructure. A key focus is securing Arden’s Google Cloud Platform environment and the agentic AI workloads running within it. This includes protecting cloud infrastructure, identities, data, models, agents, tools, APIs, integrations and runtime services. The engineer will integrate GCP-native security controls and telemetry with wider security tools, including Microsoft Sentinel SIEM/SOAR, to support security monitoring and response. The role reports to the Senior Information Security Engineer and contributes to the development of Arden’s security capabilities across cloud and AI technologies. The position operates primarily remotely, with occasional monthly attendance at the Coventry head office or an Arden campus. Arden notes that remote-working arrangements are a non-contractual benefit and that an Arden work location will be included in the employment contract.

Requirements

Strong IT skills across hardware, software, networking, cloud services and security technologies.
Practical experience configuring, operating and troubleshooting GCP security controls, including Security Command Center (SCC), IAM, service accounts, organisation policies and Cloud Audit Logs.
Experience securing generative and agentic AI workloads, including managing risks related to prompt injection, sensitive-data leakage, tool access, autonomous actions and output validation.
Experience integrating GCP security logs and findings with Microsoft Sentinel SIEM/SOAR to support monitoring, detection, investigation and incident response.
At least two years’ experience in incident detection, incident response and digital forensics.
Experience working with recognised security frameworks such as PCI DSS, Cyber Essentials, ISO 27001 or ISO 42001.
Experience with IP network architectures and technologies, including public and private cloud environments.
Experience with virtualisation technologies such as Hyper-V and VMware.
Experience managing and maintaining backup services such as Veeam or similar.
Comprehensive technical knowledge of operating systems, databases, networks and security technologies.
In-depth understanding of security protocols and principles, including antivirus, content filtering, authentication and device encryption.
Knowledge of security technologies including firewalls, endpoint detection and response (EDR/XDR), DNS, VPN, multi-factor authentication (MFA) and DDoS mitigation.
Knowledge of wired and wireless networking technologies, such as Cisco Meraki.
In-depth knowledge of GCP security architecture and tools, including VPC Service Controls, Secret Manager, Cloud KMS and Sensitive Data Protection.
Knowledge of security controls for Vertex AI and agentic AI services, including model protection, agent identities and permissions, tool and API access, data boundaries, logging, monitoring, human approval controls and emergency containment.

Nice To Haves

Relevant information security certifications, such as CISSP, CISM or CompTIA Security+.
Google Cloud professional certification in cloud security, architecture or DevOps, and/or Microsoft Sentinel training.
Training or experience in AI security, threat modelling, red teaming or secure machine-learning operations.
Experience with DevOps practices, automation and CI/CD pipelines, such as Jenkins.
Experience with AWS services and multi-cloud security across GCP, Azure and AWS.
Experience integrating GCP security logs and findings with Microsoft Sentinel to support detection, investigation and automated response.
Knowledge of emerging Google Cloud security capabilities for agentic AI, including AI Protection in Security Command Center.
Understanding of ISO 42001, secure AI engineering guidance and AI risk-management principles.

Responsibilities

Implement, configure and administer technical security controls.
Help design and implement security technologies, working with IT teams to ensure effective integration with existing systems and security infrastructure.
Secure the Google Cloud Platform environment and agentic AI workloads, including infrastructure, identities, data, models, agents, tools, APIs, integrations and runtime services.
Integrate GCP-native security controls, logs and telemetry with wider security tools, including Microsoft Sentinel SIEM/SOAR.
Support security monitoring, detection, investigation, incident response and the ongoing development of Arden’s security capabilities.