Security Engineer — Third-Party & Cloud Risk

Google; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Google Singapore is seeking a Security Engineer to lead risk assessments, threat modeling, and security design reviews for third-party engagements and cloud-based services. You will work with internal teams to strengthen system defenses and drive secure software practices across Google’s security programs.

In this role, you will build reusable security patterns, contribute to incident response improvements, and coach stakeholders on best-practice security controls, with a focus on cloud and IAM

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with security assessments or security design reviews or threat modeling.
• 2 years of experience with security engineering, computer and network security and security protocols.
• 2 years of experience coding in one or more general purpose languages (e.g., Python, SQL, C, C++, Java, Go).

Responsibilities

• Conduct comprehensive security diligence for critical and high-risk third-party vendors, evaluating their controls against Google's requirements, identifying risks, and recommending remediation.
• Contribute to the engineering improvement of the 3PSD program by developing tools, automation, and proposing process enhancements.
• Assist in technically integrating 3PSD tools with the wider OneTPRM ecosystem and support data analysis to identify risk trends.
• Collaborate with and provide security guidance to internal stakeholders like vendor managers and Product teams on third-party engagements.
• Develop and maintain deep technical expertise in security domains relevant to third-party risk (e.g., cloud, application security, IAM) and help create reusable security patterns and best practices.

Skills

Security engineering

Threat modeling

Security assessments

Programming in Python

C/C++/Java

Education

Bachelor's degree

Job description

Google Singapore is seeking a Security Engineer to lead risk assessments, threat modeling, and security design reviews for third-party engagements and cloud-based services. You will work with internal teams to strengthen system defenses and drive secure software practices across Google’s security programs.

In this role, you will build reusable security patterns, contribute to incident response improvements, and coach stakeholders on best-practice security controls, with a focus on cloud and IAM