Product Security Engineer, Cloud AI & SDLC (Equity)

Socket.dev; New York (NY); On-site; USD 207,000 - 300,000; Full time

Job summary

Google Cloud’s GDC Federated Security team seeks a seasoned Security Engineer to lead product security as a domain SME and collaborate with product teams to embed security into the SDLC. You will drive holistic security strategies across GDC products and guide secure system design using AI tooling for vulnerability research and SDLC reviews.

Ideal candidates bring extensive experience in security assessments, cloud security, and software engineering, ready to shape secure product outcomes across

Qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience with security assessments, security design reviews, or threat modeling.
• 8 years of experience with security engineering, computer and network security and security protocols.
• 8 years of coding experience in one or more general purpose languages.
• 3 years of experience with Cloud Security.

Responsibilities

• Lead product security as a horizontal domain or product vertical SME.
• Develop a trusted partnership with product team partners to ensure security is built into the SDLC.
• Focus on the holistic security strategy for GDC products.
• Leverage AI tooling to perform SDLC reviews, research and reproduce vulnerabilities, design secure systems.
• Review and develop secure operational practices, and provide security guidance for engineers. Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements.

Skills

Security assessments

Security design reviews

Threat modeling

Security engineering

Computer and network security

Security protocols

Coding (general purpose languages)

Cloud Security

Education

Bachelor's degree or equivalent practical experience

Tools

Static code analysis tools

CI/CD pipelines

Infrastructure as Code

Job description

Google Cloud’s GDC Federated Security team seeks a seasoned Security Engineer to lead product security as a domain SME and collaborate with product teams to embed security into the SDLC. You will drive holistic security strategies across GDC products and guide secure system design using AI tooling for vulnerability research and SDLC reviews.

Ideal candidates bring extensive experience in security assessments, cloud security, and software engineering, ready to shape secure product outcomes across