Security Analyst, Observability and Operations, gTech Risk Solutions

Google LLC; Atlanta, Chicago (GA, IL); On-site; USD 123,000 - 176,000; Full time

Job summary

Google LLC is seeking a Security Analyst in Observability and Operations within gTech Risk Solutions. The role focuses on monitoring, threat hunting, incident triage, and driving secure, scalable engineering outcomes.

As the observability and feedback engine, you will oversee autonomous remediations, manage AI workflow anomalies, and feed insights back into the engineering roadmap.

Qualifications

• Bachelor’s degree in CS/IS/cybersecurity or equivalent practical experience.
• 5+ years in security operations, incident response, or threat hunting.
• Experience with log analysis, SQL queries, or monitoring security controls.

Responsibilities

• Monitor agentic/automated flows and oversee security operations.
• Lead threat hunting and triage security alerts.
• Triage incident queues and coordinate with D&R teams.
• Analyze logs and data to feed into engineering roadmaps.
• Validate effectiveness of automated security tooling.

Skills

Security operations

Incident response

Threat hunting

Log analysis

SQL queries

Security monitoring

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent practical experience

Tools

Business intelligence platform

Job description

Security Analyst, Observability and Operations, gTech Risk Solutions

Share Security Analyst, Observability and Operations, gTech Risk Solutions

corporate_fare Google place Atlanta, GA, USA ; Chicago, IL, USA

X Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Atlanta, GA, USA; Chicago, IL, USA.

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent practical experience.


• 5 years of experience in security operations (SOC), incident response, threat hunting, IT compliance or equivalent.


• Experience with log analysis, data querying (SQL), or monitoring security controls.

Preferred qualifications:

• Experience coordinating cross-functional security incidents.


• Familiarity with Google’s data analysis infrastructure (e.g., business intelligence platform).


• Understanding of common security frameworks, access governance models, and the vulnerability management life-cycle.


• Ability to translate operational security findings into technical engineering requirements.

About the job

Google creates products and services that make the world a better place, and gTech’s role is to help bring them to life. Our solutions are rooted in our technical skill, product expertise, and a thorough understanding of our customers’ needs. Whether the answer is a bespoke solution to solve a unique problem, or a new tool that can scale across Google, everything we do aims to ensure customers benefit from the full potential of Google products.

gTech Risk helps protect Google and its users by identifying and implementing controls for risks. To ensure gTech's security and agility, the team analyzes gTech business processes to find control gaps, collaborates with stakeholders to resolve these gaps, and provides risk expertise to engineer innovative solutions.

gTech Risk Solutions Engineering is transforming from a manual process led organization to a proactive engineering powerhouse. Operating as a federated security partner to Google's central security organizations, we design and build highly contextualized security solutions tailored for the gTech business ecosystem.

Our mission is upfront risk prevention through technical delivery excellence, shifting the paradigm from "risk-chasing" to "prevention by design."

In this role, you are the observability and feedback engine of the team. You will ensure our autonomous remediations and agentic workflows are operating securely and effectively. You will monitor the automated flows of agentic tooling and manage the operational fallback tiers when AI workflows flag anomalies.

Utilizing your deep security domain knowledge, you will conduct threat hunting, perform complex log analysis (SQL/Business Intelligence Platform), and triage incident alerts. Crucially, your intelligence will feed directly back into our engineering roadmap. Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $123000 - $176000 (USD) + 15% bonus target + equity + benefits

Learn more about benefits at Google .

• Monitor agentic/automated flows, triage edge cases, and manage operational fallbacks when agentic workflows require human escalation.


• Run day-to-day threat hunting operations, perform advanced log analysis (SQL/Business Intelligence Platform), and triage data transfer and access alerts.


• Monitor access alerts, audit permission mappings, and verify the efficacy of our automated provisioning tools.


• Act as triage lead for the gTech ecosystem: monitor incident queues, conduct initial forensic analysis, and orchestrate handoffs with central Detection and Response (D&R) teams.


• Verify false positives, triage legacy issues, and track remediation velocity to ensure alignment with global service level objective timelines.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy , Know your rights: workplace discrimination is illegal , Belonging at Google , and How we hire .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.