Threat Intelligence Engineer - Advanced Security & APT

Google; Sydney; On-site; AUD 180,000 - 280,000; Full time

Job summary

Google’s Security team in Sydney seeks a Threat Intelligence Analyst to produce actionable intelligence on serious threats to Google, products, and users. You will work with GTIG to track government-backed actors, craft analyses, and support security and abuse teams across the company.

The role requires deep expertise in TTPs, network security, and threat actor analysis, with collaboration across engineering and product teams to mitigate risks and protect users worldwide.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments, security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of experience coding in one or more general purpose languages.

Responsibilities

• Identify, analyze, and document network signals, malware behaviors, and threat reports related to trends and developments in adversary tactics, techniques, and procedures (TTPs).
• Provide clear, actionable intelligence to product and security teams; assist in safeguarding corporate and production systems.
• Own the analysis efforts of multiple threat actors, and serve as a SME on how those actors might impact Google and our users.
• Enhance analysis efficiency by automating, developing POC code, and deploying solutions with stakeholders.
• Identify priorities and work on assignments with minimal supervision while meeting deadlines.

Skills

Security assessments

Threat modeling

Security design reviews

Security engineering

Programming languages

Communication & documentation

Education

Bachelor's degree or equivalent

Tools

YARA

Snort/Suricata

EDR rule creation

Python

C/C++

Job description

Google’s Security team in Sydney seeks a Threat Intelligence Analyst to produce actionable intelligence on serious threats to Google, products, and users. You will work with GTIG to track government-backed actors, craft analyses, and support security and abuse teams across the company.

The role requires deep expertise in TTPs, network security, and threat actor analysis, with collaboration across engineering and product teams to mitigate risks and protect users worldwide.