Senior Cloud Security Engineer

<p><strong>Join Truecaller – The place where innovation meets impact!</strong></p> <p>Truecaller's mission is to build trust in communication by making it safer, smarter, and more efficient. Born in Sweden, trusted by the world, and here’s why we stand out:</p> <ul> <li>We are trusted by over 450 million active users every month across 190+ countries</li> <li>We identify over 15 billion calls daily, helping users avoid spam and scams</li> <li>We are powered by a team of 450+ employees from 45+ nationalities</li> </ul> <p>We always look for people who take initiative, own their work, and keep raising the bar. An entrepreneurial mindset matters here, especially when it turns bold ideas into real actions. We stay collaborative and focused, always searching for smarter paths forward. If you want to make an impact and grow with a team that inspires millions, you’ll fit right in.</p> <p><strong>The role:</strong></p> <p>As a<strong> </strong>Senior Cloud Security Engineer, you will act as a technical leader in safeguarding our core cloud infrastructure. You will take ownership of maintaining the highest standards of security controls for our critical systems within Google Cloud Platform (GCP). We're looking for someone who thrives in complex environments, can solve infrastructure security problems where no established patterns exist, and isn't afraid to get their hands dirty<strong>.</strong> You won't just advise; you will actively build, configure, and fix security controls. You'll leverage your expert understanding of cloud services, infrastructure-as-code, and container security to architect robust security measures and drive systemic improvements across the organization.</p> <p><strong>What you’ll do:</strong></p> <ul> <li><strong>Architect and Lead GCP Security:</strong> Take end-to-end ownership of designing and implementing security architectures for our GCP infrastructure. You will look beyond immediate fixes to architect long-term, scalable solutions for networking, compute, storage, and GKE.</li> <li><strong>Hands-on Remediation &amp; Engineering:</strong> You don't just identify risks; you fix them. You will actively write code, create Pull Requests, and apply configurations to resolve security issues, harden infrastructure, and deploy tooling (e.g., EDR, Identity proxies) in production environments.</li> <li><strong>Drive Systemic Risk Reduction:</strong> Identify repeating classes of vulnerabilities or systemic risks (e.g., data exfiltration paths) and drive organizational change to eliminate them, rather than just patching individual issues.</li> <li><strong>Manage GCP Security Posture:</strong> Utilize GCP-native tools (e.g., Security Com