Cloud Abuse Security Engineer - Threat Hunter & Forensics

Google; Zürich; On-site; CHF 140,000 - 190,000; Full time

Job summary

Google Zurich is seeking a Security Engineer to join the Cloud CASE team. You will research detection techniques, build high-fidelity detections from network telemetry, and hunt threats while coordinating with software engineers to fix security flaws.

You will contribute to the Cloud CISO's security strategy and help secure Google Cloud products, protecting global infrastructure from attacks with a focus on practical threat intelligence and incident response.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of experience in cloud security research, network security, intrusion detection, threat intelligence, or threat detection.
• Experience with defensive security concepts such as adversity tactics and techniques, frameworks, and logging.
• Experience with networking, core internet protocols, and analyzing malicious network traffic.

Responsibilities

• Research new detection techniques to prevent and mitigate abusive activities such as outbound security attacks, botnets, DDoS, and other malicious behaviors that violate GCP’s Terms of Service.
• Develop high-fidelity detections to identify malicious activity based on raw network and host-level telemetry.
• Hunt for threats/abusers and respond proactively.
• Create, develop, and manage tools to collect and process abuse reports and threat intelligence data.

Skills

Cloud security

Threat intelligence

Network security

Threat detection

Adversary tactics

Logging

Networking protocols

Malicious traffic

Communication

Education

Bachelor's degree or equivalent

Tools

Forensics

Job description

Google Zurich is seeking a Security Engineer to join the Cloud CASE team. You will research detection techniques, build high-fidelity detections from network telemetry, and hunt threats while coordinating with software engineers to fix security flaws.

You will contribute to the Cloud CISO's security strategy and help secure Google Cloud products, protecting global infrastructure from attacks with a focus on practical threat intelligence and incident response.