Principal GCE Platform Security Architect

Google; New York (NY); On-site; USD 307,000 - 427,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) with company match

Paid time off

Job summary

Google seeks a Principal Engineer for GCE Platform Security to serve as the premier technical authority and executive architect ensuring end-to-end security for Google Compute Engine. You will lead defenses across control planes and data planes, including hypervisors, VMMs, and host OS, while navigating emerging threats from AI/LLM-enabled vectors.

You will drive proactive, defense-in-depth strategies, tackle CPU vulnerabilities, and influence secure runtime substrates for AI workloads and

Qualifications

• Bachelor’s degree in CS/CE or equivalent practical experience.
• 15 years of professional software development, or 13 with advanced degree.
• Experience architecting, developing, and securing low-level systems software across virtualization and OS stack.

Responsibilities

• Serve as the overall technical authority for GCE Platform Security and end-to-end security posture.
• Defend against autonomous agentic threat vectors and LLM-assisted exploitation tools.
• Architect hardware-level defenses to mitigate CPU vulnerabilities and cross-tenant leakage.
• Lead security defenses and privilege reduction across hypervisor technologies and VMMs.
• Advance host security and zero-trust architectures across runtimes and hardware.

Skills

Low-level systems security

Hypervisor security

Kernel security

Threat modeling

Cloud security architecture

Education

Bachelor's degree

Advanced degree

Tools

KVM

QEMU

Cloud Hypervisor

Linux kernel

Job description

Google seeks a Principal Engineer for GCE Platform Security to serve as the premier technical authority and executive architect ensuring end-to-end security for Google Compute Engine. You will lead defenses across control planes and data planes, including hypervisors, VMMs, and host OS, while navigating emerging threats from AI/LLM-enabled vectors.

You will drive proactive, defense-in-depth strategies, tackle CPU vulnerabilities, and influence secure runtime substrates for AI workloads and