Senior Security Engineer, Digital Forensics

Google; San Jose (CA); On-site; USD 174,000 - 252,000; Full time

Job summary

Google is seeking a Senior Security Engineer specializing in Digital Forensics to join the Security Response team. You will investigate security and privacy incidents, write reports, and collaborate with cross-functional teams to advance forensic capabilities.

The role requires 5+ years in security domains, strong coding, and DFIR tool experience across multiple operating systems. It offers a global on-call scope and competitive compensation.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 4 years of practical experience with digital forensic analysis.

Responsibilities

• Perform investigations on a wide variety of security and privacy events to determine risk to Google.
• Participate in large-scale incidents, write incident reports, and contribute to post-mortems.
• Participate in internal training to ensure forensic best practices are followed.
• Collaborate with teams across Google to develop new investigative and forensic capabilities.
• Develop internal and Open Source tools to support incident response (e.g., DFIR toolkits).

Skills

Security assessments

Threat modeling

Security engineering

Networking security protocols

Coding

Digital forensics

Education

Bachelor's degree or equivalent practical experience

Tools

GRR

Plaso

The Sleuth Kit

libyal

Encase/FTK/X-Ways

Cellebrite

CrowdStrike Falcon

Volatility

Mandiant MIR

Job description

Senior Security Engineer, Digital Forensics

Company: Google

Locations: San Jose, CA, USA; New York, NY, USA; San Francisco, CA, USA

Mid

Experience driving progress, solving problems, and mentoring more junior team members; deeper expertise and applied knowledge within relevant area.

Applicants in San Francisco: Qualified applications with arrest or conviction records will be considered for employment in accordance with the San Francisco Fair Chance Ordinance for Employers and the California Fair Chance Act.Note: By applying to this position you will have an opportunity to share your preferred working location from the following: San Jose, CA, USA; New York, NY, USA; San Francisco, CA, USA.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 4 years of practical experience with digital forensic analysis

Preferred qualifications:

• Experience with the current threat landscape including common attack types and malware capabilities.
• Experience with security of two or more operating systems e.g. Android, Linux, Mac OS X, Windows.
• Experience with, and detailed understanding of, digital forensics and incident response tools such as GRR, Plaso (log2timeline), The Sleuth Kit (TSK), libyal, or alternatives like Guidance Encase, AccessData FTK, X-Ways Forensics, Cellebrite, Crowdstrike Falcon, Volatility, Mandiant MIR, etc.
• Experience with reverse engineering or firmware analysis

About the job

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Google is creating next-generation technologies that will revolutionize how billions of people connect and interact with each other and information. Security and privacy are key components of these new solutions. You are enthusiastic about information security, privacy, and technology, and want to help keep the world safe, making you a great fit for our Security Response team.

Google’s Detection and Response team finds and responds to security concerns 24/7 across 3 regions. In Security Response, you will be a member of our global on-call response team and use your security experience and Digital Forensics and Incident Response (DFIR)-specific domain knowledge to investigate and respond to escalations from across Alphabet. Security Response team members train and grow in forensic investigation and crisis management skills, specializing in one or the other as their career grows.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $174000 - $252000 (USD) + 15% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities

• Perform investigations on a wide variety of security and privacy events from various sources to determine whether they pose a risk to Google.
• Participate in large-scale security and privacy incidents, write incident reports, and participate in post-mortems.
• Participate in internal training to make sure forensic best practices are followed.
• Work with teams from around Google to discover new investigative and forensic capabilities.
• Develop internal and Open Source tools used to respond to incidents (e.g., digital forensic toolkits) to support Google’s unique environment.

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.

If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.