Cloud Red Team Engineer – Offensive Security Expert

Google; United States; On-site; USD 174,000 - 252,000; Full time

Job summary

Google seeks a Senior Security Engineer for the Cloud Red Team within Cloud CISO to assess and improve the security of Google Cloud infrastructure and services. You will simulate adversaries to identify weaknesses, collaborate with engineers, and help secure products across Google's cloud environment.

The role emphasizes offensive security, vulnerability research, and developing exploits, with opportunities to influence security posture across Google Cloud.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience in a technical security role (e.g., security engineering, security research, DevSecOps, or incident response).
• Experience with vulnerability assessments and vulnerability exploitation.
• Experience in security and ethical hacking.

Responsibilities

• Define and maintain the roadmap for one of the programs within Cloud Red Team, while collaborating within a highly-skilled team to plan and execute attacks against Cloud’s products, services, and infrastructure.
• Build tools and infrastructure to support attacker goals, while identifying vulnerabilities and attack vectors across Cloud services, configurations, and related technologies.
• Participate in threat modeling exercises to identify potential attack paths and weaknesses in Cloud architectures and deployments.
• Design realistic and relevant attack scenarios based on current threat intelligence and the specific Cloud environment being assessed.
• Create reports that capture the insights gained during an attack and present them to a variety of audiences.

Skills

Security engineering

Vulnerability assessments

Vulnerability exploitation

Offensive security

Security testing

Education

Bachelor's degree

Tools

Python

Go

Bash

Job description

Google seeks a Senior Security Engineer for the Cloud Red Team within Cloud CISO to assess and improve the security of Google Cloud infrastructure and services. You will simulate adversaries to identify weaknesses, collaborate with engineers, and help secure products across Google's cloud environment.

The role emphasizes offensive security, vulnerability research, and developing exploits, with opportunities to influence security posture across Google Cloud.