Security Analyst, Observability and Operations, gTech Risk Solutions

Google•Atlanta, GA

13h•$123,000 - $176,000

About The Position

Google’s gTech Risk Solutions Engineering team builds contextualized security solutions for the gTech business ecosystem, partnering with Google's central security organizations. Its mission is to prevent risk through technical delivery and prevention by design. The Security Analyst serves as the team’s observability and feedback engine, ensuring autonomous remediations and agentic workflows operate securely and effectively. The role monitors automated tooling, manages operational fallback tiers when AI workflows flag anomalies, conducts security threat hunting and complex log analysis, and triages incident alerts. Findings are fed back into the engineering roadmap.

Requirements

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent practical experience.
Five years of experience in security operations (SOC), incident response, threat hunting, IT compliance, or equivalent.
Experience with log analysis, data querying (SQL), or monitoring security controls.

Nice To Haves

Experience coordinating cross-functional security incidents.
Familiarity with Google’s data analysis infrastructure, such as its business intelligence platform.
Understanding of common security frameworks, access governance models, and the vulnerability management lifecycle.
Ability to translate operational security findings into technical engineering requirements.

Responsibilities

Monitor agentic and automated flows, triage edge cases, and manage operational fallbacks when workflows require human escalation.
Conduct day-to-day threat hunting, advanced log analysis using SQL or a business intelligence platform, and triage data transfer and access alerts.
Monitor access alerts, audit permission mappings, and verify the effectiveness of automated provisioning tools.
Lead triage for the gTech ecosystem by monitoring incident queues, conducting initial forensic analysis, and coordinating handoffs with central Detection and Response teams.
Verify false positives, triage legacy issues, and track remediation velocity to ensure alignment with global service level objective timelines.