Security Engineer — Third-Party Diligence & Risk

Google LLC; Singapore; On-site; SGD 150,000 - 230,000; Full time

Job summary

Google LLC is seeking a Security Engineer for Third Party Security Diligence to help protect Google’s relationships with external vendors and safeguard customer data. You will assess third-party security controls, advise on risk remediation, and develop tooling to scale diligence processes.

You will collaborate with vendor managers and product teams, contribute to 3PSD program improvements, and build reusable security patterns across cloud, IAM, and application security domains.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with security assessments or security design reviews or threat modeling.
• 2 years of experience with security engineering, computer and network security and security protocols.
• 2 years of experience coding in one or more general purpose languages (e.g., Python, SQL, C, C++, Java, Go).

Responsibilities

• Conduct comprehensive security diligence for critical and high-risk third-party vendors, evaluating their controls against Google's requirements, identifying risks, and recommending remediation.
• Develop tools, automation, and proposing process enhancements to improve the 3PSD program.
• Assist in technically integrating 3PSD tools with the wider OneTPRM ecosystem and support data analysis to identify risk trends.
• Collaborate with vendor managers and Product teams to provide security guidance on third-party engagements.
• Develop and maintain deep technical expertise in security domains relevant to third-party risk and help create reusable security patterns and best practices.

Skills

Security assessments

Threat modeling

Security engineering

Programming (Python/Go/Java)

Education

Bachelor's degree or equivalent practical experience

Job description

Google LLC is seeking a Security Engineer for Third Party Security Diligence to help protect Google’s relationships with external vendors and safeguard customer data. You will assess third-party security controls, advise on risk remediation, and develop tooling to scale diligence processes.

You will collaborate with vendor managers and product teams, contribute to 3PSD program improvements, and build reusable security patterns across cloud, IAM, and application security domains.