Security Engineer, Google Cloud

Minimum qualifications:

• Bachelor's degree in Computer Science or equivalent practical experience.
  
• Experience in security and security assessment.
  
• Experience in software engineering.

Preferred qualifications:

• Experience in low-level C/Assembly.
  
• Experience with OS hardening, specifically Linux, or BSD-variants.
  
• Understanding of both offensive and defensive security methods.
  
• Excellent communication and documentation skills.
  

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

We work with a wide range of other teams such as EIP, Platforms, ProdSecLabs, CredInfra, VirtSec, ISE, PSE and other security oranisations at Google to review, design, verify and implement platform security improvements, acceptance tests, firmware, and other technical controls.

Google Cloud accelerates every organization's ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google's cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Responsibilities

• Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
  
• Work with platform engineering teams to shape the security of new and changing platforms (hardware, firmware, operating systems).
  
• Develop threat models and security requirements to best understand who/what we need to protect against and how systems should be protected.
  
• Assess existing production infrastructure to identify latent and/or systemic issues and drive remediation efforts to address them.
  
• Design and engineer the necessary security controls for identified risks.