Senior Security Engineer, Google Threat Intelligence Group

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

In your capacity as a Security Engineer within the Google Threat Intelligence Group (GTIG) DoD Team, you will act as the lead onsite Mandiant authority for a client focusing on AI technologies. You will be tasked with connecting the domains of artificial intelligence and advanced cyber threat intelligence, gaining a deep understanding of the customer's specific AI-related threat landscape to cultivate strong alliances between Google and client stakeholders. Your routine responsibilities will include converting intricate technical data into customized, strategic intelligence that empowers our partners to effectively counter and respond to evolving AI-driven cyber risks.

Minimum qualifications:

• Bachelor's degree in Computer Science or a related technical field or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 1 year of experience leading technical teams or leading technical risk analysis.
• Experience applying Cyber Threat Intelligence (CTI) methodologies to support monitoring, detection, and response capabilities within cyber security organizations.
• Possess an active TS/SCI security clearance with a full-scope polygraph.

Preferred qualifications:

• Experience in one or more of the following areas: malware reverse engineering, network forensics, threat hunting, or cloud security incident response.
• Understanding of AI/ML concepts (large language models (LLMs), predictive modeling, data pipelines) with the ability to discuss them fluently with both engineers and non-technical staff.

Responsibilities

• Identify, understand, and communicate critical threats and vulnerabilities unique to AI/ML systems, advocating for improved intelligence sharing across client and Google stakeholders.
• Produce tailored cyber threat intelligence reporting, including predictive analysis of future AI-enabled threat scenarios and assessments of adversary AI use in the wild.
• Communicate complex technical findings regarding AI security threats, vulnerabilities, and incident response insights effectively to both technical and non-technical audiences.
• Foster cross-functional collaboration with data scientists, engineers, analysts, and third-party partners to address complex AI security challenges using industry best practices. Develop training materials and conduct knowledge transfer, including vulnerability detection workshops and train-the-trainer sessions for client personnel.
• Document detection logic, model architectures, and operational procedures, creating best practice guides for integrating AI-driven detection into the Software Development Life Cycle (SDLC).