GCP Cloud Security Engineer at Function Health

United States

<h3><strong>About Us:</strong></h3><span>Function was founded with a singular focus: empower you to live 100 healthy years. We’re doing that by using the best available technology to make sure people don't suffer or die a preventable death. Function has been recognized as one of</span><a href="https://www.fastcompany.com/91040051/function-health-most-innovative-companies-2024" rel="noopener noreferrer" target="_blank"> Fast Company’s Most Innovative Companies of 2024</a><span>, and is venture-backed by</span><a href="https://a16z.com/announcement/investing-in-function-health/" rel="noopener noreferrer" target="_blank"> Andreessen Horowitz (a16z)</a><span>. Hundreds of thousands of members have joined Function to take control of their health. We are growing our team and seeking out world-class talent that deeply believes in our mission to positively impact global health, has a relentless bias toward action and a growth mindset. Function fosters a collaborative and dynamic environment, where every day we are building the future.</span><h3><br/></h3><h3><strong>Role:</strong></h3><span>Function Health is building a modern cloud security program to protect our members and platform as we scale. As a Cloud Security Engineer, you’ll focus on securing our Google Cloud Platform (GCP) environments, designing and enforcing guardrails that make our infrastructure secure by default. This role is hands-on and impact-driven: you’ll own detection, hardening, and automation that directly reduce risk across production systems.</span><br/><span>We’re looking for someone who thrives on solving hard technical problems in cloud environments, knows how to balance speed and control, and can turn complex GCP security challenges into practical, automated solutions.</span><br/><strong>Key Responsibilities</strong><ul><li><span>Serve as the embedded security partner for engineering teams building in GCP, with a focus on pragmatic, high-impact risk reduction.</span></li><li><span>Orchestrate and implement organization constraints to enforce guardrails and prevent misconfigurations.</span></li><li><span>Harden GCP environments against misconfiguration and exposure: enforce secure defaults, network segmentation, logging, and monitoring.</span></li><li><span>Drive adoption of identity- and service-account best practices, including least privilege, key rotation, and elimination of long-lived credentials.</span></li><li><span>Automate enforcement of cloud security controls using IaC, policy-as-code, and CI/CD guardrails.</span></li><li><span>Lead cloud vulnerability management, including scanning for misconfigurations, secrets, and exposed services, and partner with teams on remediation.</span></li><li><span>Integrate CSPM tooling (e.g. Wiz, Upwind, GCP Security Command Center) and cloud-native telemetry into centralized detection and response workflows.</span></li><li><span>Support incident response by providing expertise on GCP logging, forensics, and containment.</span></li><li><span>Define and track cloud security KPIs (e.g., % of resources covered by VPC Flow Logs, service accounts without keys, restricted buckets with audit logging).</span></li><li><span>Partner with product security and infrastructure engineering to shape long-term cloud security strategy.</span></li></ul><br/><strong>Must-Have Qualifications</strong><ul><li><span>5–8 years of experience in cloud engineering or security, with at least 3 years focused on GCP.</span></li><li><span>Deep knowledge of GCP services (IAM, VPC, GKE, Cloud Run, GCS, KMS, SCC) and their security implications.</span></li><li><span>Experience implementing guardrails with Terraform.</span></li><li><span>Strong grasp of IAM design, service account lifecycle, and secrets management in GCP.</span></li><li><span>Familiarity with cloud logging/monitoring (Cloud Logging, VPC Flow Logs, SCC findings) and integration into SIEM/SOAR.</span></li><li><span>Strong scripting or development skills (Python preferred) for automation.</span></li><li><span>Ability to influence engineering teams toward secure patterns without slowing them down.</span></li><li><span>Bonus: experience with HIPAA/HITRUST environments, SOC 2 Type II audits, or healthcare data protection.</span></li></ul><br/><h3><strong>To be a strong fit, you also need:</strong></h3><ul><li><strong>Bias Toward Action: </strong><span>Demonstrated ability to take initiative, make decisions under uncertainty, and move projects forward even in the face of ambiguity. We value individuals who are self-starters and ready to act on opportunities and challenges alike.</span></li><li><strong>Entrepreneurial Spirit:</strong><span> Strong adaptability to changing business needs with a knack for building and optimizing processes. Your entrepreneurial mindset will be crucial in navigating the dynamic landscape of our industry, ensuring our platform remains competitive and responsive to user needs.</span></li><li><strong>Communication:</strong><span> Excellent communication skills, capable of explaining complex technical concepts to non-technical stakeholders. Effective communication is vital for cross-functional collaboration and ensuring alignment across our organization.</span></li><li><strong>Remote Work Adaptability: </strong><span>Comfort with remote work environments, demonstrating the ability to stay productive and connected with the team irrespective of physical location.</span></li><li><strong>Continuous Improvement:</strong><span> A willingness to question assumptions and a commitment to continuous improvement. Your openness to feedback and dedication to personal and professional growth will contribute significantly to our collective success.</span></li></ul><br/><strong>Why You'll Love Working With Us:</strong>We value our team at Function and offer a competitive salary and benefits package, flexible working hours, and a dynamic work environment where creativity and innovation are encouraged. If you are a highly motivated and experienced individual who is passionate about using technology to improve people’s lives, we would love to hear from you.<br/>At Function, we celebrate diversity and are committed to building an inclusive and equitable workforce. We are proud to be an equal opportunity employer and do not discriminate based on race, color, religion, sex (including gender identity and sexual orientation), national origin, age, disability, veteran status, marital status, ancestry, or any other characteristic protected by applicable law.<br/><span>Join the Function Health team and become a part of our mission to revolutionize healthcare. Work with us to make a difference in the lives of thousands, ensuring a healthier future for all. Discover more about us and how we're changing the face of healthcare at</span><a href="https://www.functionhealth.com/" rel="noopener noreferrer" target="_blank"> </a><a href="https://www.functionhealth.com/" rel="noopener noreferrer" target="_blank">Function Health</a>.<br/><strong><em>Important Notice: </em></strong><em>Legitimate communication from the Function Health team will always come from an email address ending in </em><a href="http://functionhealth.com/" rel="noopener noreferrer" target="_blank"><em>@functionhealth.com</em></a><em>. Function Health will never request personal information such as banking details or payment during the hiring process. Please be cautious of communications or job offers that come from other email domains, instant messaging platforms, or unsolicited calls. If you ever have doubts about the legitimacy of a communication, please reach out to us directly at </em><a href="mailto:talent@functionhealth.com" rel="noopener noreferrer" target="_blank"><em>talent@functionhealth.com</em></a>