Product Security Engineer - Build Resilient, Secure Cloud Apps

Google; New York (NY); On-site; USD 147,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) with company match

Paid time off: 20 days per year

Sick time: 40 hours/year

Holidays: 13 paid days per year

Job summary

Google is seeking an Information Security Engineer for Product Security Engineering in the United States with a mid-level track. The role covers product security across Google Cloud and related services, focusing on secure design, threat modeling, and vulnerability mitigation.

You will perform reviews, mentor teammates, and drive risk-reducing initiatives while collaborating with software engineers and security teams to protect sensitive data and critical systems.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with security assessments or security design reviews or threat modeling.
• 2 years of experience with security engineering, computer and network security and security protocols.
• 2 years of coding experience in one or more general purpose languages.

Responsibilities

• Perform security reviews, research and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.
• Review designs and drive towards defense in depth and security by default, both with one-time reviews and longer term engagements.
• Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Respond to vulnerabilities with repros, variant analysis, mitigations, and hardening. Focus on the security strategy for Google Cloud.

Skills

Security assessments

Threat modeling

Security design reviews

Security engineering

Coding in general languages

Education

Bachelor's degree or equivalent practical experience

Tools

C++ dynamic analysis

Static code analysis

Job description

Google is seeking an Information Security Engineer for Product Security Engineering in the United States with a mid-level track. The role covers product security across Google Cloud and related services, focusing on secure design, threat modeling, and vulnerability mitigation.

You will perform reviews, mentor teammates, and drive risk-reducing initiatives while collaborating with software engineers and security teams to protect sensitive data and critical systems.