Google Cloud Professional Cloud Security Engineer

Module 1: Google Cloud Security Foundations

• Google Cloud security architecture
• Shared responsibility model
• Cloud security principles
• Google Cloud resource hierarchy
• Organizations, folders, and projects
• Security policies
• Security architecture design
• Zero Trust principles
• Security governance

Module 2: Implement Identity and Access Management

• Google Cloud IAM
• IAM roles and permissions
• Predefined and custom roles
• Service accounts
• Workload Identity
• Authentication and authorization
• Least privilege
• Privileged access
• Resource-level permissions
• Identity governance
• Organization policies

Module 3: Secure Network Communications

• VPC security
• Firewall rules
• Hierarchical firewall policies
• Cloud Armor
• DDoS protection
• Secure Web Proxy
• Private Google Access
• Private Service Connect
• Cloud VPN
• Cloud Interconnect
• Network segmentation
• Secure hybrid connectivity

Module 4: Implement Data Protection

• Data classification
• Encryption at rest
• Encryption in transit
• Cloud Key Management Service
• Customer-managed encryption keys
• Customer-supplied encryption keys
• Secret management
• Data Loss Prevention
• Data access controls
• Data exfiltration prevention
• VPC Service Controls

Module 5: Secure Cloud Workloads

• Compute Engine security
• Google Kubernetes Engine security
• Cloud Run security
• Serverless security
• Container security
• Workload identity
• Application security
• Secure configurations
• Vulnerability management
• Runtime protection

Module 6: Security Monitoring and Threat Detection

• Cloud Logging
• Cloud Monitoring
• Security Command Center
• Security findings
• Threat detection
• Security analytics
• Audit logs
• Security monitoring
• Event investigation
• Alerting
• Incident response

Module 7: Security Operations and Automation

• Security operations
• Incident investigation
• Threat intelligence
• Security automation
• Automated remediation
• Security workflows
• Security orchestration
• Security response
• Operational monitoring
• Security incident management

Module 8: Secure Software Supply Chain

• Software supply chain security
• Source code security
• Artifact security
• Container image security
• Binary Authorization
• Artifact Registry security
• Vulnerability scanning
• CI/CD security
• Build integrity
• Secure deployment practices

Module 9: Secure AI Workloads

• AI security fundamentals
• Securing AI workloads
• AI data protection
• Identity and access for AI services
• Model security considerations
• AI workload monitoring
• Generative AI security
• Secure AI architecture
• AI governance

Module 10: Compliance and Regulatory Controls

• Cloud compliance
• Regulatory requirements
• Security policies
• Audit controls
• Compliance monitoring
• Data residency
• Security documentation
• Risk management
• Governance
• Security assessments

• Cloud Security Engineers
• Google Cloud Security Engineers
• Cybersecurity Engineers
• Cloud Security Architects
• Security Architects
• Security Administrators
• Cloud Engineers
• Google Cloud Administrators
• DevSecOps Engineers
• SOC and Security Operations Professionals
• Cybersecurity Consultants
• Infrastructure Security Engineers
• Risk and Compliance Professionals
• Professionals responsible for cloud security, identity, data protection, and compliance
• Professionals preparing for the Google Cloud Professional Cloud Security Engineer certification

• Design and implement secure Google Cloud architectures.
• Manage identities and access using Google Cloud IAM.
• Apply least-privilege access and secure service account practices.
• Configure organization policies and resource hierarchy controls.
• Secure cloud communications and network infrastructure.
• Implement Cloud Armor, firewall policies, VPC Service Controls, and secure connectivity.
• Protect sensitive information using encryption and key management.
• Implement data protection and data exfiltration prevention.
• Secure Compute Engine, GKE, Cloud Run, and other cloud workloads.
• Monitor security events using Cloud Logging, Cloud Monitoring, and Security Command Center.
• Detect, investigate, and respond to security threats.
• Implement security automation and incident-response workflows.
• Secure the software supply chain and container workloads.
• Apply security controls to AI workloads.
• Implement cloud security governance and regulatory compliance.
• Develop skills aligned with the Professional Cloud Security Engineer role.

• Strong understanding of cloud computing and cybersecurity.
• Experience with Google Cloud services and infrastructure.
• Knowledge of IAM, authentication, and authorization.
• Understanding of network security and secure communications.
• Knowledge of encryption and key management.
• Familiarity with security monitoring and incident response.
• Understanding of cloud governance and compliance.
• Experience securing applications, containers, and cloud workloads.
• Knowledge of DevSecOps and software supply-chain security.
• Familiarity with security controls for AI and machine learning workloads.

Certification: Google Cloud Professional Cloud Security Engineer
Exam: Professional Cloud Security Engineer
Level: Professional
Exam Duration: 2 Hours
Exam Format: 50–60 multiple-choice and multiple-select questions
Exam Delivery: Online-proctored or onsite-proctored