Principal Engineer, Cloud Platform Security

Google LLC; Sunnyvale (CA); On-site; USD 307,000 - 427,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401k match

Paid time off

Sick time

Job summary

Google LLC in Sunnyvale, CA seeks a Principal Engineer for Google Compute Platform Security. You will be the technical authority and executive architect for end-to-end security of GCE, protecting global infrastructure and critical workloads across control and data planes.

You will drive defenses against emerging agentic threats, mitigate CPU vulnerabilities, and lead cross-domain security initiatives with hardware-backed isolation and zero-trust architectures.

Qualifications

• Bachelor's degree required in CS/CE or equivalent.
• 15 years of professional software development, or 13 years with an advanced degree.
• Experience architecting, developing, and securing low-level systems software across virtualization and OS stack.

Responsibilities

• Serve as the premier technical authority for GCE Platform Security.
• Define and drive multi-year security strategy for distributed control planes and node data planes.
• Architect defenses against AI/LLM-enabled threats and automate vulnerability discovery.
• Lead hardware-level defenses and isolation boundaries across hypervisors and kernels.

Skills

Low-level security

AI/LLM threat awareness

Executive leadership

Threat modeling

Education

Bachelor's degree in CS/CE or equivalent

Advanced degree (Masters/PhD) in related field

Tools

KVM

Cloud Hypervisor

QEMU

Linux kernel internals

VMMs

Firmware

Hardware-assisted virtualization

Job description

Google LLC in Sunnyvale, CA seeks a Principal Engineer for Google Compute Platform Security. You will be the technical authority and executive architect for end-to-end security of GCE, protecting global infrastructure and critical workloads across control and data planes.

You will drive defenses against emerging agentic threats, mitigate CPU vulnerabilities, and lead cross-domain security initiatives with hardware-backed isolation and zero-trust architectures.