GCP Professional Cloud Security Engineer
Google Cloud Certified — Professional Cloud Security Engineer
GCP-specific security engineering: identity, VPC SC, secrets, logging, compliance.
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› Market signals
public, citable inputs to the recognition scoreGoogle doesn't publish per-cert counts; common on GCP-heavy listings (Google, Spotify, Snap).
› Built for these roles
› Exam format
50–60 multiple-choice / multiple-select questions over 2 hours, English. Online proctored or test center.
› Recertification
Retake the current exam within two years. No CPE program, no maintenance fee.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 4 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
AWS/Azure/GCP security controls, IAM policies, CSPM, container security, shared responsibility model.
AuthN/AuthZ, SSO, MFA, PAM, RBAC/ABAC, identity governance, FIDO2/passkeys, plus non-human identity: service accounts, workload identity, agent / plugin identities.
Data classification, encryption-at-rest/in-transit, DLP, tokenization, privacy-by-design, plus the regulatory stack (GDPR, CCPA, HIPAA) that sets the bar.
Symmetric/asymmetric, PKI, TLS/SSL, hashing, post-quantum cryptography, key management.
› Also touched
Present in the blueprint but not the primary focus — you’ll be introduced but shouldn’t expect depth.
SIGMA/YARA/Suricata rule writing, hypothesis-driven hunting, log deep-dives, detection gap analysis.
SOC operations, SIEM tuning, SOAR playbooks, alert triage, log analysis, runbook development.
GPU cluster security, ML pipeline security, model serving endpoints, secrets management in ML.
› Prerequisites
Three-plus years of industry experience with one-plus year in GCP. GCP Associate Cloud Engineer recommended first.
- GCP IAM, VPC Service Controls, Cloud KMS
- Logging, Cloud Audit Logs, SCC
- Compliance frameworks in cloud context
› Progression
requiredrecommendedWhere this cert fits in the typical learning path. Required edges are vendor-gated; recommended edges reflect de facto industry progression.
No vendor-gated prereqs.
No certs require this one.
No follow-on certs reference this one yet.
› Careers that commonly pursue this cert
Secure cloud infrastructure across AWS, Azure, and GCP. Specialize in the shared responsibility model and cloud-native controls.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.