Senior Security Engineer - Cloud Controls & Risk Leader

Google LLC; Durham (NC); On-site; USD 174,000 - 252,000; Full time

Benefits offered by this job

Health insurance

401(k) match

Paid time off

Sick time

Maternity leave

Baby bonding leave

Holidays

Job summary

Google LLC is seeking aSecurity Engineer to advance cloud controls, risk assessments, and regulatory alignment across Google Cloud. You will translate standards into actionable controls, automate reporting, and drive remediation with senior engineers and cross-functional teams.

The role emphasizes leadership, AI-assisted control language, and collaboration with stakeholders to strengthen security across products and platforms.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
• Experience interpreting and implementing controls mapped to industry frameworks and regulatory standards (e.g., NIST SP 800-53, SOC 2, ISO/IEC 27001, GDPR).

Responsibilities

• Drive high-impact technical initiatives spanning multiple quarters under the Cloud Controls Uplift Strategy and Control Reporting Expansion, establishing Comply as the single, authoritative catalog aligned with ESF (NIST 800-53).
• Perform complex technical risk assessments, system design reviews, and threat modeling across Google Cloud products to identify technical security vulnerabilities and compliance gaps.
• Translate regulatory standards (e.g., ISO 27001, SOC 2, NIST, GDPR) into actionable technical control specifications, and design, implement, and automate security controls and reporting mechanisms using AI to streamline language and reduce catalog complexity.
• Define Key Control Indicators and publish tailored Control Performance and Coverage Reports to drive accountability.
• Lead cross-functional remediation efforts, performing root-cause analysis to address underlying system-wide security risks, and provide technical leadership and mentorship to junior engineers, setting technical direction for controls engineering and assurance across the team.

Skills

Security assessments

Threat modeling

Security engineering

Coding experience

Team leadership

Regulatory standards

Education

Bachelor's degree

Tools

Python

Go

SQL

Comply

RDP

Job description

Google LLC is seeking aSecurity Engineer to advance cloud controls, risk assessments, and regulatory alignment across Google Cloud. You will translate standards into actionable controls, automate reporting, and drive remediation with senior engineers and cross-functional teams.

The role emphasizes leadership, AI-assisted control language, and collaboration with stakeholders to strengthen security across products and platforms.