AI-Driven Detection Security Engineer

Google; Reston (VA); On-site; USD 123,000 - 175,000; Full time

Benefits offered by this job

Equity

Bonus

Job summary

Google is seeking a Security Engineer in the Infrastructure Detection domain to help secure Alphabet's backend platforms and Google Cloud. You will design detections, harden systems, and collaborate with software engineers to fix security flaws.

The role requires experience in security assessments, threat modeling, and coding in general purpose languages. You will participate in a 24/7 security operations program, drive proactive defenses, and contribute to AI-driven security tooling.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 1 year of experience with security assessments or security design reviews or threat modeling.
• 1 year of coding experience in one or more general purpose languages.
• Experience with security engineering, computer and network security and security protocols.

Responsibilities

• Design, implement, and maintain high-fidelity detections across critical infrastructure focus areas, including compute (GKE), supply chain, IAM/API (LOAS, Cloud IAM), and network.
• Partner with program teams to deploy agentic detection engineering workflows, shifting defenses from "Detect and Respond" to machine-speed "Infer and Interrupt."
• Ground detection logic in factual threat data by leveraging proven exploit paths from Red teams, Orange teams, and the Vulnerability Reward Program (VRP).
• Reduce manual triage toil and operational burden by optimizing feedback loops between prevention, detection, and response.
• Participate in a 24/7 global operation that hunts for and responds to security events on Google's networks. Perform investigations on a wide variety of events from various sources to determine whether they pose a threat to Google.

Skills

Security assessments

Threat modeling

Coding experience

Security engineering

Education

Bachelor's degree or equivalent

Job description

Google is seeking a Security Engineer in the Infrastructure Detection domain to help secure Alphabet's backend platforms and Google Cloud. You will design detections, harden systems, and collaborate with software engineers to fix security flaws.

The role requires experience in security assessments, threat modeling, and coding in general purpose languages. You will participate in a 24/7 security operations program, drive proactive defenses, and contribute to AI-driven security tooling.