Security Engineer, Cloud & Threat Modeling

Google; Sunnyvale (CA); On-site; USD 147,000 - 210,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

PTO 20 days

Sick time 40 hours/yr

Maternity leave

Baby bonding leave

Holidays 13 days

Job summary

Google is seeking a Security Engineer to help protect Google Cloud and its users. You will work with software engineers to identify and fix security flaws, perform risk assessments, and lead incident resolution.

The role emphasizes threat modeling, security reviews, and secure design, with opportunities to influence defenses across networks and applications. US-based, with a competitive compensation package.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of security assessments or threat modeling.
• 2 years of security engineering, computer and network security and security protocols.
• 2 years of coding experience in one or more general purpose languages.

Responsibilities

• Perform security reviews, reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.
• Review designs and drive towards defense in depth and security by default, both with one-time reviews and longer term engagements.
• Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Respond to vulnerabilities with repros, variant analysis, mitigations, and hardening. Focus on the security strategy for Google Cloud.

Skills

Security assessments

Threat modeling

Security engineering

Coding skills

Threat detection

Education

Bachelor's degree or equivalent practical experience

Job description

Google is seeking a Security Engineer to help protect Google Cloud and its users. You will work with software engineers to identify and fix security flaws, perform risk assessments, and lead incident resolution.

The role emphasizes threat modeling, security reviews, and secure design, with opportunities to influence defenses across networks and applications. US-based, with a competitive compensation package.