Security Engineer III, Incident Response

Google; Boulder (CO); On-site; USD 147,000 - 210,000; Full time

Job summary

Google is seeking a Security Engineer III, Incident Response in Boulder, CO. You will join the on-call Security Response team, leading incident management and coordinating with engineers, lawyers, and executives to contain and resolve security incidents.

Responsibilities include identifying security issues, performing risk analyses, and driving improvements across Google’s products and services. The role requires developing DFIR expertise and mentoring teammates, with a compensation range

Qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with security assessments, security design reviews, or threat modeling.
• 2 years of experience with security engineering, computer and network security, and security protocols.
• 2 years of coding experience in one or more general purpose languages.

Responsibilities

• Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
• Triage, assess, coordinate and drive resolution on a different range of incidents.
• Perform highly technical analysis of risks and emergent issues.
• Analyze causes to identify trends and systematic issues. Improve information security and privacy of Google’s products and services.
• Develop excellence in incident management through tools and infrastructure and preparing teams across Google through exercises and training.

Skills

Security assessments

Threat modeling

Security engineering

Coding experience

Education

Bachelor's degree or equivalent practical experience

Job description

Security Engineer III, Incident Response

Mid

Experience driving progress, solving problems, and mentoring more junior team members; deeper expertise and applied knowledge within relevant area.

The application window will be open until at least August 13, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with security assessments or security design reviews or threat modeling.
• 2 years of experience with security engineering, computer and network security and security protocols.
• 2 years of coding experience in one or more general purpose languages.

Preferred qualifications:

• Experience with incident or emergency response coordination.
• Technical background with hands-on experience in, e.g., systems administration, software engineering, digital forensics, security engineering, privacy engineering.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Google is creating next-generation technologies that will revolutionize how billions of people connect and interact with each other and information. Security and privacy are critical components to these new solutions. If you are passionate about information security, privacy and technology, and want to help keep the world safe, then joining our Security Response team might be for you!

Google's "Detection and Response" team finds and responds to threats 24/7 across 3 regions. In Security Response, you will be a member of our global on-call response team and use your broad security experience and DFIR-specific domain knowledge to investigate and respond to escalations from across Alphabet. Security Response team members train and grow in broad forensic investigation and crisis management skills, but specialize in one or the other as their career grows.

As an IM (Incident Management) specialist, you’ll use professional emergency management procedures to lead teams of engineers, lawyers, executives and others toward fast, effective responses to any situation and quickly mitigate and resolve security incidents. You will also assist in technical assessments of security issues alongside other Security Engineers as necessary. Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $147000 - $210000 (USD) + 15% bonus target + equity + benefits.

Learn more about benefits at Google.

Responsibilities

• Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
• Triage, assess, coordinate and drive resolution on a different range of incidents.
• Perform highly technical analysis of risks and emergent issues.
• Analyze causes to identify trends and systematic issues. Improve information security (and privacy) of Google’s products and services.
• Develop excellence in incident management through tools and infrastructure and preparing teams across Google through exercises and training.

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.

If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.