Detection Security Engineer — AI-Driven Defense

Google; United States; On-site; USD 123,000 - 175,000; Full time

Benefits offered by this job

Equity

Job summary

Google is seeking a Security Engineer in the Detection domain to design and implement high-fidelity detections for critical infrastructure across compute, IAM, and network. You will collaborate with cross-functional teams to automate detections and enable proactive defense.

The role spans threat hunting, incident response, and forensics, with global 24/7 coverage and a focus on reducing manual toil. The role is based in Reston, VA, and involves working with Google Cloud Platform integration,

Qualifications

• Bachelor's degree or equivalent practical experience.
• 1 year of experience with security assessments, security design reviews, or threat modeling.
• 1 year of coding experience in one or more general-purpose languages.
• Experience with security engineering, computer and network security, and security protocols.

Responsibilities

• Design, implement, and maintain high-fidelity detections across critical infrastructure focus areas, including compute (GKE), supply chain, IAM/API (LOAS, Cloud IAM), and network.
• Partner with program teams to deploy agentic detection engineering workflows, shifting defenses from "Detect and Respond" to machine-speed "Infer and Interrupt".
• Ground detection logic in factual threat data by leveraging proven exploit paths from Red teams, Orange teams, and the Vulnerability Reward Program (VRP).
• Reduce manual triage toil and operational burden by optimizing feedback loops between prevention, detection, and response.
• Participate in a 24/7 global operation that hunts for and responds to security events on Google's networks. Perform investigations on a wide variety of events from various sources to determine whether they pose a threat to Google.

Skills

Security engineering

Network security

Security protocols

Threat modeling

Coding in languages

Education

Bachelor's degree

Job description

Google is seeking a Security Engineer in the Detection domain to design and implement high-fidelity detections for critical infrastructure across compute, IAM, and network. You will collaborate with cross-functional teams to automate detections and enable proactive defense.

The role spans threat hunting, incident response, and forensics, with global 24/7 coverage and a focus on reducing manual toil. The role is based in Reston, VA, and involves working with Google Cloud Platform integration,