Security Engineer, Google Threat Intelligence

Google Inc.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Google Security Threat Intelligence is seeking a mid-level Security Engineer to drive progress in threat intelligence, security assessments, and design reviews. You will mentor junior team members and contribute to threat modeling, design reviews, and security protocols.

You will join Google's Threat Intelligence Group to analyze threats and provide actionable intelligence to protect Google users and products, including collaboration with security and software engineering teams.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments, security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.

Responsibilities

• Identify, analyze, and document network signals, malware behaviors, and threat reports related to trends and developments in adversary TTPs.
• Provide clear, actionable, and structured intelligence to product and security teams, assist in ensuring corporate and production systems are safeguarded.
• Own the analysis efforts of multiple threat actors, and serve as a subject matter expert on how those actors might impact Google and our users.
• Enhance analysis efficiency by conceiving and implementing automation opportunities, developing proof-of-concept code, and collaborating with stakeholders to deploy solutions.
• Be capable of quickly identifying personal and team priorities, and able to work on assignments with minimal supervision while maintaining quality and deadlines.

Skills

Security assessments

Security engineering

Threat modeling

Coding

Education

Bachelor's degree or equivalent practical experience

Tools

YARA

Snort/Suricata

EDR rules

Python

Job description

Security Engineer, Google Threat Intelligence

Share Security Engineer, Google Threat Intelligence

Mid

Experience driving progress, solving problems, and mentoring more junior team members; deeper expertise and applied knowledge within relevant area.

Share Security Engineer, Google Threat Intelligence

info_outline X

Google will be prioritizing applicants who have a current right to work in Singapore, and do not require Google's sponsorship of a visa.

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments, security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of experience coding in one or more general purpose languages.

Preferred qualifications:

• Prior experience in detection engineering with YARA, Snort/Suricata, Endpoint Detection and Response (EDR) rule creation.
• Experience in Python, C/C++ or scripting languages.
• Experience in reverse engineering.
• Strong understanding of network fundamentals, techniques for lateral machine movement, malware persistence mechanisms, covert channels, application security and user authentication, command and control techniques.
• Strong communication and documentation skills.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Google's Threat Intelligence Group (GTIG) is looking for a threat intelligence analyst for our Koreas Advanced Persistent Threat (APT) mission.

In this role, you will produce threat intelligence focusing on serious threats to Google, our products, and our users which are consumed by hundreds of security and abuse teams across the company, all levels of leadership, and externally to the security research industry. You will specialize in thwarting government-backed threats. You will be part of a specialized team at the forefront of tracking cyber threat actors.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Responsibilities

• Identify, analyze, and document network signals, malware behaviors, and threat reports related to trends and developments in adversary Tactics, Techniques, and Procedures (TTPs).
• Provide clear, actionable, and structured intelligence to product and security teams, assist in ensuring corporate and production systems are safeguarded.
• Own the analysis efforts of multiple threat actors, and serve as a subject matter expert on how those actors might impact Google and our users.
• Enhance analysis efficiency by conceiving and implementing automation opportunities, developing proof-of-concept code, and collaborating with stakeholders to deploy solutions.
• Be capable of quickly identifying personal and team priorities, and able to work on assignments with minimal supervision while maintaining quality and deadlines.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy , Know your rights: workplace discrimination is illegal , Belonging at Google , and How we hire .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.