Senior Cloud Security Engineer

Hej, Truecaller is calling you from Stockholm, Sweden! Ready to pick up?

Our goal is to make communication smarter, safer, and more efficient, all while building trust everywhere. We're all about bringing you smart services with a big social impact, keeping you safe from fraud, harassment, scam calls, or messages, so you can focus on the conversations that matter.

• Top 20 most downloaded apps globally, and world’s #1 caller ID and spam-blocking service for Android and iOS, with extensive AI capabilities, with more than 400 million active users per month. 
• Founded in 2009 with an impressive year-on-year growth with high profitability.
• Listed on Nasdaq OMX Stockholm and is categorized as a Large Cap. Our focus on innovation, operational excellence, sustainable growth, and collaboration has resulted in consistently high profitability and strong EBITDA margins.
• A team of 400 people from ~35 different nationalities spread across our headquarters in Stockholm and offices in Bangalore, Mumbai, Gurgaon, and Tel Aviv with high ambitions. 

We, at the Security team, play a critical part in Truecaller’s continuous success and mission to build trust everywhere as we handle the overall security in every domain of Truecaller. Our vision is to contribute to the development of a state-of-the-art product for our users and push the boundaries of security.

As a Senior Cloud Security Engineer at Truecaller, your role is pivotal in safeguarding our core cloud infrastructure. You will be a key member of the Security team, focusing on maintaining the highest standards of security controls for our critical systems within Google Cloud Platform (GCP). We're looking for someone passionate about solving complex infrastructure security problems through innovative engineering solutions. You'll leverage your deep understanding of cloud services, infrastructure-as-code, networking, and container security to design, implement, and manage robust security measures, ensuring the resilience and integrity of Truecaller's platform.

The impact you will create:

• Design and Secure GCP Infrastructure: Lead the design, implementation, and management of security architectures and controls specifically for our GCP infrastructure (networking, compute, storage, GKE).
• Secure Infrastructure-as-Code (IaC): Develop, implement, and enforce security best practices within our IaC (Config Connector) workflows and CI/CD pipelines to prevent vulnerabilities proactively.
• Manage GCP Security Posture: Utilize GCP-native tools (e.g., Security Command Center, Cloud Armor, VPC Service Controls, IAM) to continuously monitor, assess, and improve the security posture of our cloud environment.
• Lead Infrastructure Vulnerability Management: Drive the identification, assessment, and remediation of security vulnerabilities specifically within GCP infrastructure components and configurations.
• Implement Network Security Controls: Design, configure, and manage GCP network security controls, including firewall rules, VPC configurations, network segmentation, and load balancing.
• Enhance Container & Kubernetes Security: Implement and manage security best practices for our containerized environments and Google Kubernetes Engine (GKE) deployments throughout the lifecycle.  
• Automate Security Operations: Develop and maintain automation scripts (using Python, Bash, Go, etc.) to streamline security monitoring, alerting, and response tasks within GCP.  
• Collaborate and Provide Guidance: Partner with our infrastructure, and development teams to embed security into their workflows and provide expert guidance on secure infrastructure design and practices.  

What you bring in:

• Experience: Bachelor’s degree in Computer Science, Information Security, or a related field, with several years of hands-on experience in a senior engineering role focused specifically on infrastructure security.  
• Deep GCP Expertise: Proven, in-depth knowledge and practical experience securing cloud infrastructure, services, and security features (e.g., GKE, VPC, IAM, KMS, Security Command Center, Cloud Armor, or other hyperscalers similar services, or equivalent services offered by other hyperscale cloud providers).  
• Infrastructure as Code (IaC) Security: Strong experience writing and securing IaC deployments.  
• Network Security: Solid understanding and practical application of cloud network security principles (VPC, firewalls, segm