Senior Security Engineer, Exploits, Google Threat Intelligence Group

Google; Florida; Remote; USD 174,000 - 252,000; Full time

Benefits offered by this job

Remote work options

Job summary

Google is hiring a Security Engineer to advance threat research, design reviews, and risk analysis. You will work with software engineers to identify and fix security flaws while leading complex investigations.

The role emphasizes collaboration across security teams, development of detection capabilities, and mentoring of junior engineers. Remote-ready with select locations in the US.

Qualifications

• Bachelor's degree or equivalent practical experience.
• At least 5 years in security assessments/design reviews or threat modeling.
• At least 5 years in security engineering, network security and protocols.
• At least 5 years coding in one or more general languages.
• At least 1 year leading technical teams or risk analysis.

Responsibilities

• Own and drive threat research projects and risk analyses.
• Lead complex security analyses, model threat activity and IOCs.
• Create and deploy detection signatures to monitor actors and close gaps.
• Produce technical intelligence docs and actor profiles for stakeholders.
• Mentor engineers and collaborate with product teams on mitigations.

Skills

Security design reviews

Threat modeling

Security engineering

Security protocols

Coding experience

Technical leadership

Risk analysis

Education

Bachelor's degree or equivalent practical experience

Tools

VirusTotal

SIEMs

Job description

In most instances, this position requires in-person interviews as part of the hiring process.

Note: By applying to this position you will have an opportunity to share your preferred working location from the following:

Remote locations: Virginia, USA; Florida, USA; Georgia, USA; Maine, USA; North Carolina, USA; New York, USA.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Preferred qualifications

• Experience with threat intelligence platforms and tools (e.g., VirusTotal, SIEMs).
• Proficiency in analyzing and correlating data from sources to track threat activity.
• Knowledge of Android and Chrome security and internals.
• Ability to lead complex threat research projects separately.
• Excellent malware analysis, reverse engineering, or vulnerability analysis skills.

About The Job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

As a Security Engineer on our team, you will conduct in-depth research on risk groups, their tactics, techniques, and procedures (TTPs), and the malware they employ. You will utilize internal intelligence platforms to model risk activity and generate insights. This role involves close collaboration with various security teams across Google to develop and implement effective countermeasures, contributing directly to risk disruption and enhancing our collective security posture. You will lead projects, mentor others, and apply your passion for security research.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as its trusted partner to enable growth and solve their most critical business problems.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $174000 - $252000 (USD) + 15% bonus target + equity + benefits

Responsibilities

Learn more about benefits at Google .

• Own, prioritize, and drive the tracking of complex, threat actors and associated research projects.
• Lead complex technical analyses, modeling threat activity, tactics, techniques, and procedures (TTPs), and indicators of compromise (IOCs) across internal platforms (mGraph).
• Create and deploy detection signatures (autoqueries, Watchtower rules) to maintain visibility over threat actors and assist in closing security gaps.
• Produce polished, high-quality technical intelligence documentation and actor profiles to deliver actionable insights to internal and external stakeholders.
• Influence technical direction within your scope, mentor junior engineers, and collaborate with cross-functional Google teams to support threat disruption efforts. Collaborate with security engineers and product teams in designing innovative exploit mitigations.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .