Senior Cloud Security Engineer: Threat Modeling & Controls

Google LLC; Raleigh (NC); On-site; USD 174,000 - 252,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) with company match

PTO 20 days

Sick time 40 hours/year

Maternity leave 28-30 weeks

Baby bonding leave 18 weeks

Holidays 13 days

Job summary

Google LLC is seeking a Security Engineer to advance the Cloud Controls Uplift Strategy, translate regulatory standards into actionable controls, and lead cross-functional remediation across Google Cloud products. You will drive risk assessments, design reviews, and automated security reporting, collaborating with software engineers to fix vulnerabilities and strengthen assurance across the platform.

The role emphasizes leading technical risk analysis, developing controls, and leveraging AI to

Qualifications

• Bachelor’s degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
• Experience interpreting and implementing controls mapped to industry frameworks and regulatory standards (e.g., NIST SP 800-53, SOC 2, ISO/IEC 27001, GDPR).

Responsibilities

• Drive high-impact technical initiatives spanning multiple quarters under the Cloud Controls Uplift Strategy and Control Reporting Expansion, establishing Comply as the single, authoritative catalog aligned with ESF (NIST 800-53).
• Perform complex technical risk assessments, system design reviews, and threat modeling across Google Cloud products to identify technical security vulnerabilities and compliance gaps.
• Translate regulatory standards (e.g., ISO 27001, SOC 2, NIST, GDPR) into actionable technical control specifications, and design, implement, and automate security controls and reporting mechanisms using AI to streamline language and reduce catalog complexity.
• Define Key Control Indicators and publish tailored Control Performance and Coverage Reports to drive accountability.
• Lead cross-functional remediation efforts, performing root-cause analysis to address underlying system-wide security risks, and provide technical leadership and mentorship to junior engineers, setting technical direction for controls engineering and assurance across the team.

Skills

Security assessments

Threat modeling

Security design reviews

Security engineering

Coding skills

Technical leadership

Education

Bachelor’s degree or equivalent practical experience

Tools

Comply

RDP

Job description

Google LLC is seeking a Security Engineer to advance the Cloud Controls Uplift Strategy, translate regulatory standards into actionable controls, and lead cross-functional remediation across Google Cloud products. You will drive risk assessments, design reviews, and automated security reporting, collaborating with software engineers to fix vulnerabilities and strengthen assurance across the platform.

The role emphasizes leading technical risk analysis, developing controls, and leveraging AI to