Cloud Abuse Security Engineer

Google; Zürich; On-site; CHF 140,000 - 190,000; Full time

Job summary

Google Zurich is seeking a Security Engineer to join the Cloud CASE team. You will research detection techniques, build high-fidelity detections from network telemetry, and hunt threats while coordinating with software engineers to fix security flaws.

You will contribute to the Cloud CISO's security strategy and help secure Google Cloud products, protecting global infrastructure from attacks with a focus on practical threat intelligence and incident response.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of experience in cloud security research, network security, intrusion detection, threat intelligence, or threat detection.
• Experience with defensive security concepts such as adversity tactics and techniques, frameworks, and logging.
• Experience with networking, core internet protocols, and analyzing malicious network traffic.

Responsibilities

• Research new detection techniques to prevent and mitigate abusive activities such as outbound security attacks, botnets, DDoS, and other malicious behaviors that violate GCP’s Terms of Service.
• Develop high-fidelity detections to identify malicious activity based on raw network and host-level telemetry.
• Hunt for threats/abusers and respond proactively.
• Create, develop, and manage tools to collect and process abuse reports and threat intelligence data.

Skills

Cloud security

Threat intelligence

Network security

Threat detection

Adversary tactics

Logging

Networking protocols

Malicious traffic

Communication

Education

Bachelor's degree or equivalent

Tools

Forensics

Job description

In most instances, this position requires in-person interviews as part of the hiring process.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.


• 2 years of experience working in one or more of the following areas: cloud security research, network security, intrusion detection system, threat intelligence, or threat detection.


• Experience working with defensive security concepts such as adversity tactics and techniques, frameworks, and logging.


• Experience with networking, core internet protocols, and analyzing malicious network traffic.

Preferred qualifications

• Experience with host/memory based forensics and detections.


• Very strong communication and documentation skills.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Cloud CISO is responsible for ensuring that every Google Cloud product ships as secure as it can be. Cloud CISO owns and drives the product security strategy for Google Cloud. We work with almost every aspect of Google’s infrastructure and on solving truly planet scale infrastructure security problems that have societal level impacts. The Cloud Abuse Security Engineering (CASE) team, within Cloud CISO, safeguards Google, its customers, users, and the internet from threats originating within Google Cloud.

Responsibilities

• Research new detection techniques to prevent and mitigate abusive activities such as outbound security attacks, botnets, DDoS, and other malicious behaviors that violate GCP’s Terms of Service.


• Develop high-fidelity detections to identify malicious activity based on raw network and host-level telemetry.


• Hunt for threats/abusers and respond proactively.


• Create, develop, and manage tools to collect and process abuse reports and threat intelligence data.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .