Senior Security Engineer, Serving Layer and Platform Security, DeepMind

Google; New York (NY); Hybrid; USD 207,000 - 300,000; Full time

Benefits offered by this job

Equity

Benefits

Job summary

Google DeepMind is seeking a Senior Security Engineer to secure its core serving infrastructure and platform layer. You will design and enforce multi-tenant data protections, workload isolation, and secure-by-default deployment patterns for advanced AI serving.

Applicants should have deep security operations experience, strong C/C++ coding skills, and a track record securing large-scale frontier AI systems. The role offers on-site and hybrid arrangements across U.S. locations.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5+ years in security engineering, platform security, infrastructure hardening, network protocols, or systems security architecture.
• 5+ years in security operations (monitoring, incident response, vulnerability triage, on-call, threat hunting).
• 5+ years of coding in C/C++ or similar languages.

Responsibilities

• Evaluate and harden GDM’s core serving infrastructure (Beyond, Agency, AI Studio APIs) and inference pipelines.
• Develop and maintain threat models covering GDM serving layers and inference workloads.
• Build secure-by-default libraries, reference architectures, and deployment templates that embed infrastructure security into deployment pipelines.
• Participate in the team's operational security rotation (on-call).

Skills

Security engineering

Platform security

Infrastructure hardening

Incident response

Threat modeling

C/C++ programming

Education

Bachelor's degree in CS / cybersecurity / electrical-computer engineering

Job description

Senior Security Engineer, Serving Layer and Platform Security, DeepMind

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Mountain View, CA, USA; New York, NY, USA.

Minimum qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Electrical/Computer Engineering, or equivalent practical experience.
• 5 years of experience in security engineering, platform security, infrastructure hardening, network protocols, or systems security architecture.
• 5 years of experience in security operations (e.g., operational security monitoring, incident response, vulnerability triage, rotational on-call duty, or threat hunting).
• 5 years of coding experience in one or more systems programming languages (e.g., C, C++).

Preferred qualifications:

• Experience securing large-scale distributed serving infrastructure, core API development, multi-tenant data architectures, etc.
• Demonstrated experience conducting variant analysis, developing security mitigations, and responding to high-severity infrastructure incidents in a production environment.
• Expertise in workload isolation, Linux kernel security, TPU/GPU architecture security, or hardware-backed root-of-trust models.
• Technical understanding of frontier AI security challenges, including prompt injection containment, secure agentic tool execution, and inference memory safety.

About the job

There's no such thing as a "safe system"—only safer systems. The GDM Product Security Team serves as the single point of accountability for GDM's product security posture by providing embedded, specialized security expertise across infrastructure and product development lifecycles, from early design through production operations. The team ensures GDM’s products and systems remain a secure and reliable frontier AI platform by bridging product development with Google's horizontal security functions and the GDM Security and Privacy organization.

In this role, you will focus on securing GDM’s core serving infrastructure and underlying platform layer (including Beyond, Agency, AI Studio / GeminiAPI, and TPU inference systems). You will proactively evaluate and harden serving components, enforce multi-tenancy data protection, design OS/hardware workload isolation, and build secure-by-default paved paths for model serving. Because operational security is core to maintaining our frontier AI platform, this position requires a direct background in security operations, including vulnerability triage, threat modeling, incident escalation, and rotational on-call support.

Artificial intelligence will be one of humanity’s most transformative inventions. At Google DeepMind, we are a pioneering AI lab with exceptional interdisciplinary teams focused on advancing AI development to solve complex global challenges and accelerate high-quality product innovation for billions of users. We use our technologies for widespread public benefit and scientific discovery, ensuring safety and ethics are always our highest priority.

We are pushing the boundaries across multiple domains. Our global teams offer diverse learning opportunities and varied career pathways for those driven to achieve exceptional results through collective effort.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $207000 - $300000 (USD) + 20% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities

• Evaluate and harden GDM’s core serving infrastructure (Beyond, Agency, AI Studio APIs) and inference pipelines.
• Develop and maintain threat models covering GDM serving layers and inference workloads. Model attack vectors unique to frontier AI, including prompt injection mitigation, tool-calling hardening, multi-tenant data boundary protection, and API surface security.
• Build secure-by-default libraries, reference architectures, and deployment templates that embed infrastructure security into GDM’s deployment pipelines and serving stacks.
• Participate in the team's operational security rotation (on-call).

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.

If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of director or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.