Google
Information Security Engineer, Product Security Engineering, Cloud CISO
Found: Today
Information Security Engineer, Product Security Engineering, Cloud CISO
Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. In this role, you will have the opportunity to help set the direction for product security in Google Cloud and partner with amazing existing teams across Google, which includes existing security teams, privacy teams and engineering teams. You will help set the focus, direction and impact of this organization with regards to product security as there is an exciting mix of work to be accomplished across multiple security domains and few examples are: security reviews, security education, web application scanning and testing, vulnerability research and security data analysis all with the goal of highlighting and driving down risk.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 5 years of experience with security assessments or security design reviews or threat modeling.
- 5 years of experience with security engineering, computer and network security and security protocols.
- 5 years of coding experience in one or more general purpose languages.
Preferred qualifications:
- Experience in building relationships at various levels, along with written and verbal communications skills and the ability to influence others.
- Experience in consulting or project management with a proven track record of meeting or exceeding goals.
- Understanding of both offensive and defensive security methods.
Responsibilities
- Conduct security reviews, research and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers.
- Review and develop secure operational practices, and provide security guidance for engineers and support staff.
- Assess designs and look for vulnerabilities, both with one-time reviews and longer term engagements.
- Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
- Respond to vulnerabilities with repos, mitigations, and hardening.
