Senior Product Security Engineer: App & AI Security

Google DeepMind; Mountain View (CA); On-site; USD 207,000 - 300,000; Full time

Benefits offered by this job

Equity

Bonus target (20%)

Benefits

Job summary

Google DeepMind is seeking a Product Security Engineer to embed with GDM teams and drive application security across GeminiApps and AI Studio. You will perform comprehensive security reviews, design client-side data protection mechanisms, audit web and mobile attack surfaces, and implement secure paved paths for developer teams.

A core foundation of this role is hands-on security operations—actively owning vulnerability triage, evaluating bug bounty submissions, responding to incidents, and

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or equivalent practical experience.
• 8 years of coding experience in general-purpose languages (e.g., JavaScript/TypeScript, Java/Kotlin, Swift, Python, Go, C++).
• 5 years of experience in application security engineering (web application security, mobile client security, web API security, or client-side cryptography).
• 5 years of experience in security operations (e.g., vulnerability management, bug bounty triage, penetration testing, red team engagement, or operational incident handling).
• 5 years of experience testing, and launching software products.

Responsibilities

• Perform security evaluations and code audits across web and mobile (Android/iOS) applications on a recurring cadence, identifying flaws and driving remediation to completion.
• Conduct in-depth search architecture reviews, code-level security audits, and feature-level threat assessments for GDM products.
• Build and continuously maintain threat models for GDM web/mobile products and client-facing AI capabilities, addressing unique risks around third-party integrations, agentic features, and client-side data privacy.
• Develop secure-by-default client libraries, SDKs, and templates that make application security seamless for GDM product developers.
• Serve as an active member of the rotational security operations on-call team.

Skills

Coding experience in multiple langs

Security engineering

Security operations

Software testing & product launches

Education

Bachelor's degree in CS/Engineering

Master's or PhD in CS/Cybersecurity/Engineering

Tools

Static code analysis

Dynamic code analysis

Fuzzing

Job description

Google DeepMind is seeking a Product Security Engineer to embed with GDM teams and drive application security across GeminiApps and AI Studio. You will perform comprehensive security reviews, design client-side data protection mechanisms, audit web and mobile attack surfaces, and implement secure paved paths for developer teams.

A core foundation of this role is hands-on security operations—actively owning vulnerability triage, evaluating bug bounty submissions, responding to incidents, and