Threat Intelligence Security Engineer — Remote (Singapore)

Google; Singapore; On-site; SGD 110,000 - 170,000; Full time

Job summary

Google is seeking a Threat Intelligence Analyst to focus on the Koreas APT mission, producing actionable intelligence for Google, products, and users. You will collaborate with security teams to identify threats, document findings, and improve defenses while handling multiple actors with minimal supervision.

The role requires a strong background in security assessments, threat modeling, and scripting, with a focus on detecting government-backed threats and communicating complex results clearly.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments, security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of experience coding in one or more general purpose languages.

Responsibilities

• Identify, analyze, and document network signals, malware behaviors, and threat reports related to trends and developments in adversary TTPs.
• Provide clear, actionable intelligence to product and security teams to safeguard systems.
• Own analysis of multiple threat actors and act as SME on potential impact to Google and users.
• Enhance analysis efficiency by automating processes and developing proof-of-concept code.
• Prioritize work independently with high quality and timely delivery.

Skills

Security engineering

Threat modeling

Security assessments

Incident response

Python scripting

Education

Bachelor's degree or equivalent practical experience

Tools

YARA

Snort/Suricata

EDR rule creation

C/C++

Scripting languages

Job description

Google is seeking a Threat Intelligence Analyst to focus on the Koreas APT mission, producing actionable intelligence for Google, products, and users. You will collaborate with security teams to identify threats, document findings, and improve defenses while handling multiple actors with minimal supervision.

The role requires a strong background in security assessments, threat modeling, and scripting, with a focus on detecting government-backed threats and communicating complex results clearly.