GCP Security Engineer

Job Description:

GCP Security Engineer

Salary: From £50,000 plus yearly bonus and benefits

Contract type: Permanent  

Shift pattern: Full-time – 35 hours per week

Location : Hybrid / any Bupa office  

Role Overview

Bupa’s cloud platforms underpin critical health and care services. As a GCP Security Engineer you’ll help make our Google Cloud Platform (GCP) environments secure-by-design and secure-by-default.
You’ll work with platform, product and security teams to implement guardrails, automate controls, and triage findings—gaining hands-on experience with identity, network, data and workload protection in
GCP.
The role follows Bupa’s engineering profession principles and balances technical depth with collaboration and communication
      
         

How you’ll help us make health happen:

• Contribute to the build and hardening of GCP Landing Zones (Projects, Folders & Networks) aligned to Bupa’s Global Security Pattern.

• Implement and maintain security guardrails via infrastructure-as-code (Terraform), including policy-as-code checks in our CI/CD pipelines.

• Contribute to the design and maintenance of GCP Service Blueprints that embed Bupa’s approved security patterns and guardrails. Ensure documentation is easily
  consumable by engineering product teams.

• Assist with least-privilege role design, service account hygiene

• Configure and tune cloud-native security posture tools (E.g. Wiz) and help triage and track findings through to remediation with product teams.

• Map implemented controls and evidence to Bupa standards and relevant frameworks. Keep knowledge articles, diagrams, and runbooks current

Key Skills / Qualifications Needed For This Role

• 1+ years in security or cloud engineering

• Knowledge of cloud security and the shared responsibility model. Familiarity with Google, GCP core services and security features: IAM, Cloud KMS/CMEK, VPC & Firewalling, Cloud Logging/Monitoring.

• Hands-on experience with Terraform and CI/CD tooling; basic scripting (Python/Bash) for automation and tooling integration, comfortable working in Git/PR workflows.

• Understanding of baseline security standards and privacy obligations relevant to Bupa (e.g., ISO/IEC 27001/27002, UK Data Protection Act/UK GDPR) sufficient to follow documented controls and produce evidence.

• Strong focus on accuracy and attention to detail in cloud cost management information, reporting and analysis.

• Exposure to CNAPP/CSPM or cloud workload protection solutions and defining monitoring/coverage acceptance criteria (e.g., familiarity with Wiz/Prisma or similar).

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits. 

Joining Bupa in this role you will receive the following benefits and more: 

• 25 days holiday, increasing through length of service, with option to buy or sell

• Bupa health insurance as a benefit in kind

• An enhanced pension plan and life insurance

• Yearly Bonus

• Onsite gyms or local discounts where no onsite gym available

• Various other benefits and online discounts

Why Bupa?

We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.

We encourage all of our people to “Be you at Bupa”, we champion diversity, and we understand the importance of our people representing the communities and customers we serve. That’s why we especially encourage applications from people with diverse backgrounds and experiences.

Bupa is a Level 2 Disability Confident Employer. This means we aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role. We’ll make sure you are treated fairly and offer reasonable adjustments as part of our recruitment process to anyone that needs them.

Time Type:

Full time

Job Area:

IT

Locations:

Angel Court, London, Bupa Place, Kirkstall Forge, Staines - Willow House, Victory House, Brighton