Security Engineer, Detection, Cloud

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 2 years of coding experience in one or more general purpose languages.
• 2 years of experience with security engineering, computer and network security and security protocols.

Preferred qualifications:

• 5 years of experience in responding to security problems in aimed environments, security alerts, analysis and response.
• Experience in programming languages (e.g., Go, Python, C/C++, or Java).
• Experience in analysis of large data sets and intrusion detection.
• Experience with Cloud environments, preferrably Google Cloud Platform.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

The Detection Team develops and maintains the signals, tools, and infrastructure that we use, constantly evolving them to match sophisticated attackers.

In this role, you will build advanced and novel detection mechanisms for attacker techniques tactics and procedures, develop systems to automate remediation, conduct threat hunting, and perform network and systems forensics, as well as malware and indicator analysis. You will be responsible for managing all malicious activity on Google's networks. You will perform deep analysis of threats on our corporate, production, and acquisition environments. You will help respond to Advanced Persistent Threat (APT) attackers and insider threats. You will build a fully automated detection and response machine, an automated Security Operations Center (SOC).

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

The US base salary range for this full-time position is $136,000-$200,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Responsibilities

• Participate in a 24/7 global operation that hunts and responds to security events on Google's networks.
• Perform investigations on a wide variety of events from various sources to determine whether they pose a threat to Google.
• Participate in large-scale security incidents.
• Work with teams from across Google to discover new detection capabilities and logging sources.