Staff Security Research Engineer – Equity & Bonus

Google Inc.; San Jose (CA); On-site; USD 207,000 - 300,000; Full time

Benefits offered by this job

Google benefits

Job summary

Google Inc. in United States (San Jose, CA) is seeking a Staff Security Engineer focused on Security Research to own complex security outcomes, drive risk analysis, and mentor teams.

Responsibilities include vulnerability research across iOS, MacOS, and XNU, building scalable research tooling, publishing results to the defensive community, and collaborating with engineers to fix security flaws. The role demands advanced experience, strong coding skills, and a track record of leadership in

Qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience with security assessments or security design reviews or threat modeling.
• 8 years of experience with security engineering, computer and network security and security protocols.
• 8 years of coding experience in one or more general purpose languages.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Responsibilities

• Conduct vulnerability research and exploit development, specifically in (but not limited to) iOS, MacOS and XNU.
• Create tools and infrastructure that enables the team to scale up our research efforts.
• Engage the wider defensive community by publishing your results.
• Work with other security engineers on the analysis of, and response to vulnerabilities reported by other parties.

Skills

Security assessments

Security design reviews

Threat modeling

Security engineering

Coding

Team leadership

Education

Bachelor's degree

Tools

iOS

MacOS

XNU

Job description

Google Inc. in United States (San Jose, CA) is seeking a Staff Security Engineer focused on Security Research to own complex security outcomes, drive risk analysis, and mentor teams.

Responsibilities include vulnerability research across iOS, MacOS, and XNU, building scalable research tooling, publishing results to the defensive community, and collaborating with engineers to fix security flaws. The role demands advanced experience, strong coding skills, and a track record of leadership in