Senior Security Engineer, Digital Forensics

Google; San Francisco (CA); On-site; USD 174,000 - 252,000; Full time

Job summary

Google is seeking a Security Engineer in San Francisco to protect networks and systems, collaborating with software engineers to fix security flaws and respond to incidents.

You will be part of Google's Security Response team, owning on-call investigations, incident reports, and post-mortems, with opportunities to grow in DFIR and crisis management skills.

Qualifications

• Bachelor's degree or equivalent practical experience in a relevant field.
• 5 years of experience with security assessments, design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security, and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 4 years of practical experience with digital forensic analysis.

Responsibilities

• Perform investigations on a wide variety of security and privacy events to determine threats to Google.
• Participate in large-scale security and privacy incidents, write incident reports, and participate in post-mortems.
• Participate in internal training to ensure forensic best practices are followed.
• Work with teams across Google to discover new investigative and forensics capabilities.
• Develop internal and Open Source tools to respond to incidents (e.g., digital forensic toolkits).

Skills

security assessments

security design reviews

threat modeling

security engineering

security protocols

coding

digital forensic analysis

Education

Bachelor's degree or equivalent practical experience

5 years of experience with security assessments or security design reviews or threat modeling

Tools

GRR

Plaso (log2timeline)

The Sleuth Kit (TSK)

libyal

Guidance EnCase

AccessData FTK

X-Ways Forensics

Cellebrite

CrowdStrike Falcon

Volatility

Mandiant MIR

Job description

Applicants in San Francisco: Qualified applications with arrest or conviction records will be considered for employment in accordance with the San Francisco Fair Chance Ordinance for Employers and the California Fair Chance Act.
Note: By applying to this position you will have an opportunity to share your preferred working location from the following: New York, NY, USA; San Francisco, CA, USA; San Jose, CA, USA.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 4 years of practical experience with digital forensic analysis.

Preferred qualifications

• Experience with the current threat landscape including common attack types and malware capabilities.
• Experience with security of two or more operating systems (e.g., Android, Linux, Mac OS X, Windows).
• Experience with reverse engineering or firmware analysis.
• Experience with, and detailed understanding of, digital forensics and incident response tools such as GRR, Plaso (log2timeline), The Sleuth Kit (TSK), libyal, or alternatives like Guidance Encase, AccessData FTK, X-Ways Forensics, Cellebrite, Crowdstrike Falcon, Volatility, Mandiant MIR, etc.

About The Job

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Google is creating next-generation technologies that will revolutionize how billions of people connect and interact with each other and information. Security and Privacy are critical components to these new solutions. If you are passionate about information security, privacy and technology, and want to help keep the world safe, then joining our Security Response team might be for you! Google’s “Detection and Response” team finds and responds to threats 24/7 across 3 regions.

In Security Response, you will be a member of our global on-call response team and use your broad security experience and DFIR-specific domain knowledge to investigate and respond to escalations from across Alphabet. Security Response team members train and grow in broad forensic investigation and crisis management skills, but specialize in one or the other as their career grows.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $174000 - $252000 (USD) + 15% bonus target + equity + benefits

Responsibilities

Learn more about benefits at Google .

• Perform investigations on a wide variety of security and privacy events from various sources to determine whether they pose a threat to Google.
• Participate in large-scale security and privacy incidents, write incident reports, and participate in post-mortems.
• Participate in internal training to make sure forensic best practices are followed.
• Work with teams from around Google to discover new investigative and forensics capabilities.
• Develop internal and Open Source tools used to respond to incidents (e.g., digital forensic toolkits) to support Google’s unique environment.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .