Job Description:
GCP Security Engineer
Salary: From £50,000 plus yearly bonus and benefits
Contract type: Permanent
Shift pattern: Full-time – 35 hours per week
Location : Hybrid / any Bupa office
Role Overview
Bupa’s cloud platforms underpin critical health and care services. As a GCP Security Engineer you’ll help make our Google Cloud Platform (GCP) environments secure-by-design and secure-by-default.
You’ll work with platform, product and security teams to implement guardrails, automate controls, and triage findings—gaining hands-on experience with identity, network, data and workload protection in
GCP.
The role follows Bupa’s engineering profession principles and balances technical depth with collaboration and communication
How you’ll help us make health happen:
1. Contribute to the build and hardening of GCP Landing Zones (Projects, Folders & Networks) aligned to Bupa’s Global Security Pattern.
2. Implement and maintain security guardrails via infrastructure-as-code (Terraform), including policy-as-code checks in our CI/CD pipelines.
3. Contribute to the design and maintenance of GCP Service Blueprints that embed Bupa’s approved security patterns and guardrails. Ensure documentation is easily
consumable by engineering product teams.
4. Assist with least-privilege role design, service account hygiene
5. Configure and tune cloud-native security posture tools (E.g. Wiz) and help triage and track findings through to remediation with product teams.
6. Map implemented controls and evidence to Bupa standards and relevant frameworks. Keep knowledge articles, diagrams, and runbooks current
Key Skills / Qualifications Needed For This Role
7. 1+ years in security or cloud engineering
8. Knowledge of cloud security and the shared responsibility model. Familiarity with Google, GCP core services and security features: IAM, Cloud KMS/CMEK, VPC & Firewalling, Cloud Logging/Monitoring.
9. Hands-on experience with Terraform and CI/CD tooling; basic scripting (Python/Bash) for automation and tooling integration, comfortable working in Git/PR workflows.
10. Understanding of baseline security standards and privacy obligations relevant to Bupa (e.g., ISO/IEC 27001/27002, UK Data Protection Act/UK GDPR) sufficient to follow documented controls and produce evidence.
11. Strong focus on accuracy and attention to detail in cloud cost management information, reporting and analysis.
12. Exposure to CNAPP/CSPM or cloud workload protection solutions and defining monitoring/coverage acceptance criteria (e.g., familiarity with Wiz/Prisma or similar).
Benefits
Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.
Joining Bupa in this role you will receive the following benefits and more:
13. 25 days holiday, increasing through length of service, with option to buy or sell
14. Bupa health insurance as a benefit in kind
15. An enhanced pension plan and life insurance
16. Yearly Bonus
17. Onsite gyms or local discounts where no onsite gym available
18. Various other benefits and online discounts
Why Bupa?
We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.