Senior Security Engineer, Exploits, Google Threat Intelligence Group

Google; North Carolina; Remote; USD 174,000 - 252,000; Full time

Job summary

Google is seeking a Security Engineer for Google Cloud to advance threat research, risk modeling, and detection engineering. You will partner with cross-functional teams to identify vulnerabilities, model risk activity, and deliver actionable intelligence that disrupts threats.

The role emphasizes mentorship, project leadership, and collaboration across Security and product teams. The position involves hands-on security analyses, developing detections, and driving security improvements at scale.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Responsibilities

• Own, prioritize, and drive the tracking of complex, threat actors and associated research projects.
• Lead complex technical analyses, modeling threat activity, tactics, techniques, and procedures (TTPs), and indicators of compromise (IOCs) across internal platforms (mGraph).
• Create and deploy detection signatures (autoqueries, Watchtower rules) to maintain visibility over threat actors and assist in closing security gaps.
• Produce polished, high-quality technical intelligence documentation and actor profiles to deliver actionable insights to internal and external stakeholders.
• Influence technical direction within your scope, mentor junior engineers, and collaborate with cross-functional Google teams to support threat disruption efforts. Collaborate with security engineers and product teams in designing innovative exploit mitigations.

Skills

Security assessments

Security design reviews

Threat modeling

Security engineering

Security protocols

Coding experience

Team leadership

Threat analysis

Education

Bachelor's degree or equivalent practical experience

Job description

In most instances, this position requires in-person interviews as part of the hiring process.

Note: By applying to this position you will have an opportunity to share your preferred working location from the following:

Remote locations: Virginia, USA; Florida, USA; Georgia, USA; Maine, USA; North Carolina, USA; New York, USA.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Preferred qualifications

• Experience with threat intelligence platforms and tools (e.g., VirusTotal, SIEMs).
• Proficiency in analyzing and correlating data from sources to track threat activity.
• Knowledge of Android and Chrome security and internals.
• Ability to lead complex threat research projects separately.
• Excellent malware analysis, reverse engineering, or vulnerability analysis skills.

About The Job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

As a Security Engineer on our team, you will conduct in-depth research on risk groups, their tactics, techniques, and procedures (TTPs), and the malware they employ. You will utilize internal intelligence platforms to model risk activity and generate insights. This role involves close collaboration with various security teams across Google to develop and implement effective countermeasures, contributing directly to risk disruption and enhancing our collective security posture. You will lead projects, mentor others, and apply your passion for security research.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as its trusted partner to enable growth and solve their most critical business problems.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $174000 - $252000 (USD) + 15% bonus target + equity + benefits

Responsibilities

Learn more about benefits at Google .

• Own, prioritize, and drive the tracking of complex, threat actors and associated research projects.
• Lead complex technical analyses, modeling threat activity, tactics, techniques, and procedures (TTPs), and indicators of compromise (IOCs) across internal platforms (mGraph).
• Create and deploy detection signatures (autoqueries, Watchtower rules) to maintain visibility over threat actors and assist in closing security gaps.
• Produce polished, high-quality technical intelligence documentation and actor profiles to deliver actionable insights to internal and external stakeholders.
• Influence technical direction within your scope, mentor junior engineers, and collaborate with cross-functional Google teams to support threat disruption efforts. Collaborate with security engineers and product teams in designing innovative exploit mitigations.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .