Senior Product Security Engineer - AI & Apps

Google DeepMind; Mountain View (CA); On-site; USD 207,000 - 300,000; Full time

Job summary

Google DeepMind seeks a Product Security Engineer to drive application security across GeminiApps and AI Studio, performing reviews, data protection design, and attack surface audits to safeguard user trust and platform integrity.

You will own vulnerability triage, assess external bug bounty submissions, and respond to incidents while contributing to rotational on-call coverage and security operations excellence.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or equivalent practical experience.
• 8 years of coding experience in general-purpose languages (e.g., JavaScript/TypeScript, Java/Kotlin, Swift, Python, Go, C++).
• 5 years of experience in application security engineering (web app security, mobile client security, web API security, or client-side cryptography).
• 5 years of experience in security operations (vulnerability management, bug bounty triage, penetration testing, red team engagement, or operational incident handling).
• 5 years of experience testing and launching software products.

Responsibilities

• Perform security evaluations and code audits across web and mobile apps, driving remediation.
• Conduct threat modeling, code-level security audits, and feature-level assessments for GDM products.
• Build and maintain threat models for web/mobile products and client-facing AI capabilities.
• Develop secure-by-default client libraries, SDKs, and templates for product developers.
• Serve as an active member of rotational security operations on-call team.

Skills

Coding in general-purpose languages

Application security engineering

Security operations

Software testing and releases

Education

Masters or PhD in CS / Cybersecurity / Computer Engineering

Job description

Google DeepMind seeks a Product Security Engineer to drive application security across GeminiApps and AI Studio, performing reviews, data protection design, and attack surface audits to safeguard user trust and platform integrity.

You will own vulnerability triage, assess external bug bounty submissions, and respond to incidents while contributing to rotational on-call coverage and security operations excellence.