Senior Security Engineer, Cloud Threat Detection

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
  
• 8 years of experience with security assessments or security design reviews or threat modeling.
  
• 8 years of experience with security engineering, computer and network security and security protocols.
  
• 8 years of coding experience in one or more general purpose languages.
  
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
  

Preferred qualifications:

• Knowledge of defensive security concepts such as adversity tactic and technique, MITRE ATT&CK framework, logging etc.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Google Cloud Product Security Engineering (PSE) is responsible for ensuring that every Google Cloud product ships as secure as it can be. PSE owns and drives the product security strategy for Google Cloud. We work with almost every aspect of Google's infrastructure and on solving truly planet scale infrastructure security problems that have societal level impacts.

The Cloud Advanced Security Engineering team, within PSE, is dedicated to detecting, preventing, and mitigating all forms of threats in GCP products. Our mission is to safeguard Google, its customers, users, and the internet from threats originating within Google Cloud.
As a Security Engineer on the Cloud Advanced Security Engineering team in a PSE, you will be a part of the team that's responsible for protecting Google and its users from attacks and abuses originating from Google Cloud Platform. You will ensure trust and reputation not only for this product, but also for Google as a broader brand and company. You will work globally and cross-functionally with several internal stakeholders.The US base salary range for this full-time position is $189,000-$284,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google .

Responsibilities

• Research new detection techniques to prevent/mitigate abusive activities such as outbound security attacks, botnet, Denial-of-Service (DDoS) and other malicious behaviors which violate GCP's Terms of Service.
• Develop high fidelity detection to identify malicious activity based on raw network and host level telemetry.
• Analyze various logs and packets to increase accuracy of detections.
• Huntfor threats/abusers and respond proactively.
• Create, develop and manage tools to collect and process abuse reports and threat intelligence data.