Senior Security Engineer, Digital Forensics

Socket.dev; New York (NY); On-site; USD 174,000 - 252,000; Full time

Benefits offered by this job

Bonus target

Equity

Benefits

Job summary

Google is seeking a Security Engineer to join the Security Response team, focusing on investigations and DFIR capabilities. You will analyze a wide range of security and privacy events, respond to escalations, and contribute to crisis management and post-incident analysis.

You'll work with cross-functional teams to enhance forensics tools and procedures, support large-scale incidents, and participate in on-call rotations to protect user data and systems worldwide.

Qualifications

• Candidates must have a Bachelor's degree or equivalent practical experience.
• At least 5 years designing or assessing security systems and threat models.
• At least 5 years in security engineering, network security and protocols.
• At least 5 years coding in general purpose languages.
• At least 4 years practical experience in digital forensic analysis.

Responsibilities

• Perform investigations on security and privacy events to determine threats.
• Participate in large-scale incidents, write incident reports, and perform post-mortems.
• Contribute to forensic best practices through training and collaboration.
• Work with Google teams to develop new investigative and forensics capabilities.
• Develop internal/open-source tools to support incident response.

Skills

Security assessments

Threat modeling

Security engineering

Security protocols

Coding experience

Digital forensics

Education

Bachelor's degree or equivalent

Job description

MINIMUM QUALIFICATIONS:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews orthreat modeling.
• 5 years of experience with security engineering, computer and networksecurity and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 4 years of practical experience with digital forensic analysis.

PREFERRED QUALIFICATIONS:

• Experience with the current threat landscape including common attack typesand malware capabilities.
• Experience with security of two or more operating systems (e.g., Android,Linux, Mac OS X, Windows).
• Experience with reverse engineering or firmware analysis.
• Experience with, and detailed understanding of, digital forensics andincident response tools such as GRR, Plaso (log2timeline), The Sleuth Kit(TSK), libyal, or alternatives like Guidance Encase, AccessData FTK, X-WaysForensics, Cellebrite, Crowdstrike Falcon, Volatility, Mandiant MIR, etc.

ABOUT THE JOB:

There's no such thing as a "safe system" - only safer systems. Our Security teamworks to create and maintain the safest operating environment for Google's usersand developers. As a Security Engineer, you help protect network boundaries,keep computer systems and network devices hardened against attacks and providesecurity services to protect highly sensitive data like passwords and customerinformation. Security Engineers work directly with network equipment andactively monitor our systems for attacks and intrusions. You also work withsoftware engineers to proactively identify and fix security flaws andvulnerabilities.

You use your industry experience to own and drive the resolution of complexsecurity incidents, policy questions and technical security issues.

Google is creating next-generation technologies that will revolutionize howbillions of people connect and interact with each other and information.Security and Privacy are critical components to these new solutions. If you arepassionate about information security, privacy and technology, and want to helpkeep the world safe, then joining our Security Response team might be for you!Google’s “Detection and Response” team finds and responds to threats 24/7 across3 regions.

In Security Response, you will be a member of our global on-call response teamand use your broad security experience and DFIR-specific domain knowledge toinvestigate and respond to escalations from across Alphabet. Security Responseteam members train and grow in broad forensic investigation and crisismanagement skills, but specialize in one or the other as their career grows.

Individual pay is determined by factors including job-related skills,experience, and relevant education or training.

US: $174000 - $252000 (USD) + 15% bonus target + equity + benefits

Learn more about benefits at Googlehttps://www.google.com/about/careers/applications/benefits/.

RESPONSIBILITIES:

• Perform investigations on a wide variety of security and privacy events fromvarious sources to determine whether they pose a threat to Google.
• Participate in large-scale security and privacy incidents, write incidentreports, and participate in post-mortems.
• Participate in internal training to make sure forensic best practices arefollowed.
• Work with teams from around Google to discover new investigative andforensics capabilities.
• Develop internal and Open Source tools used to respond to incidents (e.g.,digital forensic toolkits) to support Google’s unique environment.