Security Engineer — Third-Party Risk & Diligence

GOOGLE ASIA PACIFIC PTE. LTD.; Singapore; On-site; SGD 120,000 - 210,000; Full time

Job summary

Google Asia Pacific is seeking a Security Engineer to drive the 3PSD program, focusing on third-party risk management and security diligence for critical vendors. You will assess controls, identify vulnerabilities, and contribute to automating processes while working with vendor managers and product teams.

The role emphasizes security design reviews, threat modeling, and cross-functional collaboration to strengthen Google’s security posture across the vendor ecosystem in Singapore.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with security assessments or security design reviews or threat modeling.
• 2 years of experience with security engineering, computer and network security and security protocols.
• 2 years of coding in one or more general purpose languages (e.g., Python, SQL, C, C++, Java, Go).

Responsibilities

• Conduct comprehensive security diligence for critical and high-risk third-party vendors and assess their controls against Google's requirements.
• Identify risks and recommend remediation actions.
• Contribute to 3PSD program by developing tools, automation, and process improvements.
• Assist in integrating 3PSD tools with the OneTPRM ecosystem and support data analysis.
• Collaborate with vendor managers and product teams to provide security guidance.

Skills

Security assessments

Threat modeling

Security engineering

Programming languages

Education

Bachelor's degree or equivalent practical experience

Job description

Google Asia Pacific is seeking a Security Engineer to drive the 3PSD program, focusing on third-party risk management and security diligence for critical vendors. You will assess controls, identify vulnerabilities, and contribute to automating processes while working with vendor managers and product teams.

The role emphasizes security design reviews, threat modeling, and cross-functional collaboration to strengthen Google’s security posture across the vendor ecosystem in Singapore.