Detection Engineer II — Enterprise Security & Automation

Cybersecurity Jobs; San Jose (CA); On-site; USD 123,000 - 174,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

Google is seeking a Security Engineer II to focus on Enterprise Detection Engineering for its enterprise environments and users.

You'll partner with peers to design threat models, define detection requirements, and implement detection logic across 2–3 interconnected components, aiming for thorough coverage. The role also involves evaluating risk with threat intelligence and joining Red Team and Purple Team activities to identify gaps and drive improvements to tooling and pipelines.

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 1 year of security assessments, security design reviews, or threat modeling.
• 1 year of coding experience in a general-purpose language.
• Experience in security engineering, computer and network security, and security protocols.

Responsibilities

• Plan and carry out threat models and define detection requirements for enterprise surfaces.
• Support design and implementation of detection logic across 2–3 interconnected components.
• Evaluate risk using threat intelligence and risk models to reduce false positives.
• Participate in Red Team and Purple Team activities to identify detection gaps and remediation detections.
• Contribute to detection engineering pipelines, testing frameworks, and automation tooling.

Skills

Threat modeling

Security assessments

Security design reviews

Coding

Security engineering

Threat hunting

Education

Bachelor’s degree or equivalent

Tools

SQL

Logica

Yara-L

YARA

Sigma

MITRE ATT&CK

Job description

Google is seeking a Security Engineer II to focus on Enterprise Detection Engineering for its enterprise environments and users.

You'll partner with peers to design threat models, define detection requirements, and implement detection logic across 2–3 interconnected components, aiming for thorough coverage. The role also involves evaluating risk with threat intelligence and joining Red Team and Purple Team activities to identify gaps and drive improvements to tooling and pipelines.