Senior Cloud Security Engineer - Threat Modeling

Google; New York (NY); On-site; USD 207,000 - 300,000; Full time

Job summary

Google is seeking a Security Engineer to join the Cloud CISO Security Engineering team, focusing on designing and verifying secure systems across Google Cloud. You will perform technical security assessments, code reviews, and vulnerability testing to raise security standards and drive secure-by-design outcomes.

You will own incident resolution, policy questions, and risk analysis while collaborating with product teams, engineers, and external partners.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience with security assessments or security design reviews or threat modeling.
• 8 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Responsibilities

• Perform security reviews, research and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.
• Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements.
• Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Respond to vulnerabilities with repos, mitigations, and hardening. Surface vulnerability patterns and design them out.
• Focus on the security strategy for Google Cloud and scalable solutions, and the ability to influence cross-organizationally.

Skills

Security assessments

Security design reviews

Threat modeling

Security engineering

Computer and network security

Security protocols

Coding experience

Leading teams

Job description

Google is seeking a Security Engineer to join the Cloud CISO Security Engineering team, focusing on designing and verifying secure systems across Google Cloud. You will perform technical security assessments, code reviews, and vulnerability testing to raise security standards and drive secure-by-design outcomes.

You will own incident resolution, policy questions, and risk analysis while collaborating with product teams, engineers, and external partners.