Security Engineering Lead: Threat Modeling & Fuzzing

Socket.dev; Mountain View (CA); On-site; USD 207,000 - 300,000; Full time

Benefits offered by this job

Bonus target

Equity

Benefits

Job summary

Google Security seeks a leader to oversee a team of engineers protecting Tensor SoC and Pixel systems. You will coordinate with hardware and software teams to identify and remediate vulnerabilities, guiding security best practices across firmware and software stacks.

The role emphasizes threat modeling, design reviews, and building automated testing tools and exploit development to strengthen system security.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience with penetration testing, vulnerability research, or code-level security auditing.
• 8 years of coding experience in C, C++, Python, Rust.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis.
• Experience in people management.

Responsibilities

• Conduct offensive security assessments, vulnerability research, and penetration testing across Tensor SoC firmware and software stacks.
• Perform architecture and implementation-level threat modeling, design reviews, and security audits.
• Develop automated testing tools, fuzzers, and exploits to identify and validate hardware and software vulnerabilities.
• Partner cross-functionally with hardware, software, and product teams to design robust mitigation strategies and drive security best practices.
• Lead and support a team of software security engineers through technical guidance, task assignment, and professional development.

Skills

Penetration testing

Vulnerability research

Code-level security auditing

Team leadership

People management

Education

Bachelor's degree or equivalent practical experience

Master's/PhD in Computer Science or related field

Job description

Google Security seeks a leader to oversee a team of engineers protecting Tensor SoC and Pixel systems. You will coordinate with hardware and software teams to identify and remediate vulnerabilities, guiding security best practices across firmware and software stacks.

The role emphasizes threat modeling, design reviews, and building automated testing tools and exploit development to strengthen system security.