Senior Security Engineer, Firmware Security

Google; Seattle (WA); On-site; USD 174,000 - 252,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) with company match

Paid time off

Sick time

Holidays

Job summary

Google is seeking a Senior Security Engineer to join the Cloud Security Engineering team in the United States. You will perform security assessments, code reviews and vulnerability testing to strengthen security by design across Google Cloud products.

In this role, you will collaborate with software engineers to identify and fix security flaws, lead risk analyses, and help build secure, scalable infrastructure across a variety of stacks and tools.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments, design reviews, or threat modeling.
• 5 years of experience with security engineering, computer and network security, and security protocols.
• 5 years of coding experience in general purpose languages.
• 1 year of experience leading teams or technical risk analysis.

Responsibilities

• Leverage Gemini and other AI tools to analyze products, identify risks and create remediation strategies.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.
• Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements.
• Look for vulnerabilities with techniques including agentic AI scanning, reverse engineering, fuzzing, and static analysis.
• Respond to vulnerabilities with repos, mitigations, and hardening, surface vulnerability patterns and design them out, focusing on the security strategy for Google Cloud.

Skills

Security assessments

Threat modeling

Security engineering

Security protocols

Coding ability

Leadership experience

Education

Bachelor's degree or equivalent practical experience

Job description

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Kirkland, WA, USA; Seattle, WA, USA; Sunnyvale, CA, USA; Zürich, Switzerland.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Preferred qualifications:

• Knowledge of security engineering, computer and network security, authentication, security protocols, and applied cryptography.

About The Job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Cloud Security Engineering is the team responsible for helping ensure every product Cloud offers is as secure as it can be. We are also responsible for increasing the assurance levels of security in the infrastructure underlying all our products. This team focuses on increasing the capabilities of each product team to develop more secure products by design and by default, from patterns, tools and frameworks to increasing the skill level of embedded security leads.

As a Senior Security Engineer you will help to ensure that our software and systems are designed and implemented to the highest security standards. You will perform technical security assessments, code reviews and vulnerability testing to highlight risk, helping Google teams and partners to improve security, and work on a wide variety of software designs and technology stacks.Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $174000 - $252000 (USD) + 15% bonus target + equity + benefits.

Responsibilities

Learn more about benefits at Google .

• Leverage Gemini and other AI tools to analyze products, identify risks and create remediation strategies.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.
• Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements.
• Look for vulnerabilities with techniques including agentic AI scanning, reverse engineering, fuzzing, and static analysis.
• Respond to vulnerabilities with repos, mitigations, and hardening, surface vulnerability patterns and design them out, focus on the security strategy for Google Cloud.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .