Sovereign Cloud Security Engineer: Incident Response Lead

Google; United States; On-site; USD 174,000 - 252,000; Full time

Job summary

Google is seeking a Senior Security Engineer for the U.S. Sovereign Cloud Security Operations team in Reston, VA. You will lead complex incident response, proactively hunt threats, and mature vulnerability management while collaborating with software engineers to fix security flaws.

You will design detection rules and SOAR playbooks, automate response workflows, and mentor other engineers to build a resilient defense for Google's public sector customers.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security, and security protocols.
• 5 years of coding experience in one or more general-purpose languages.
• Must possess an active Top Secret/SCI security clearance with current polygraph.

Responsibilities

• Lead incident response from initial detection through resolution and post-mortem analysis.
• Proactively hunt for emerging threats and malicious activity across the sovereign cloud environment.
• Design, build, and tune high-fidelity detection rules, analytics, and correlation searches within the SIEM platform.
• Own technical aspects of the vulnerability management life-cycle. Analyze scan results, prioritize risks, and partner with engineering teams to drive timely remediation.
• Engineer and maintain critical security tools and infrastructure. Mentor and guide security engineers as a key escalation point.

Skills

Security assessments

Threat modeling

Security engineering

Coding

US citizen

Education

Bachelor's degree or equivalent

Tools

SIEM

SOAR

Vulnerability scanning tools

Job description

Google is seeking a Senior Security Engineer for the U.S. Sovereign Cloud Security Operations team in Reston, VA. You will lead complex incident response, proactively hunt threats, and mature vulnerability management while collaborating with software engineers to fix security flaws.

You will design detection rules and SOAR playbooks, automate response workflows, and mentor other engineers to build a resilient defense for Google's public sector customers.