API Security Engineer — AI-Driven Security Scanning

Google Inc.; New York (NY); On-site; USD 147,000 - 210,000; Full time

Job summary

Google seeks a Software Engineer for External API Security in New York, NY, to advance secure-by-default API surfaces and AI-assisted vulnerability scanning. You will contribute to protecting user data and Google’s public API boundaries from authorization weaknesses.

Responsibilities include building AI-enabled scanning systems, collaborating with infra and product teams, and driving centralized remediation campaigns across Google APIs. Strong security software development experience is required.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with software development in one or more programming languages, or 1 year of experience with an advanced degree.
• 2 years of experience building software for security (e.g., vulnerability analysis, identity and access management).

Responsibilities

• Develop and improve AI-assisted API vulnerability scanning systems and automated launch checkers.
• Drive central remediation campaigns to remediate systemic vulnerability classes without excessive churn.
• Collaborate with core infrastructure and product teams to establish secure-by-default API deployment architectures and reduce risk.
• Build and maintain infrastructure and automation for security policy enforcement, monitoring, and regression prevention.
• Analyze emerging authorization bypass patterns and evaluate agent-based AI systems to harden API access controls.

Skills

Programming Go

Programming Java

Programming Python

Software development

Security software development

AI/agent-based systems

Education

Bachelor's degree or equivalent practical experience

Tools

Go

Java

Python

Job description

Google seeks a Software Engineer for External API Security in New York, NY, to advance secure-by-default API surfaces and AI-assisted vulnerability scanning. You will contribute to protecting user data and Google’s public API boundaries from authorization weaknesses.

Responsibilities include building AI-enabled scanning systems, collaborating with infra and product teams, and driving centralized remediation campaigns across Google APIs. Strong security software development experience is required.