Security Engineer, Infrastructure Detection

Google•Boulder, CO

3h•$147,000 - $210,000

About The Position

Google's Security team works to create and maintain a safe operating environment for users and developers. Security Engineers work with network equipment and actively monitor systems for attacks and intrusions, and collaborate with software engineers to proactively identify and fix security flaws and vulnerabilities. In this role, you will design and deploy scalable software and frameworks to automate security workflows and build autonomous defenses; optimize security detections across core compute, network, and data platforms; and use data-driven evaluation, regression testing, and tuning for autonomous agents in production. You will work with partner teams across Google to develop detection capabilities, improve operational sustainability, and strengthen security signals. The role also participates in a global operation to hunt for and respond to security events, including large-scale incidents.

Requirements

Bachelor's degree or equivalent practical experience.
At least 2 years of experience with security engineering, computer and network security, and security protocols.
At least 2 years of experience with security assessments, security design reviews, or threat modeling.
At least 2 years of experience coding in one or more general-purpose programming languages.
Experience in cyber threat engineering, such as vulnerability research, exploit development, reverse engineering, malware analysis, threat modeling, or code-level security auditing.
Experience in a technical security role, such as security engineering, security research, DevSecOps, incident response, SOC analysis, malware research, or threat analysis.

Nice To Haves

Experience driving operational continuity and detection fidelity in infrastructure environments.
Experience executing intermediate software engineering tasks and an interest in managing technical projects.
Experience in systems engineering, virtualization, and Linux.
Experience implementing, administering, or troubleshooting network infrastructure devices, such as firewalls, routers, switches, wireless equipment, and network monitoring tools.
Knowledge of intrusion detection, network hardening, and threat intelligence.
Knowledge of data evaluation and regression testing for production systems.

Responsibilities

Design, develop, and deploy scalable software systems and frameworks to automate complex security workflows and engineer autonomous defenses against external attacks and insider risks.
Re-engineer and optimize complex security detections protecting Google's core compute, network, and data platforms.
Use data-driven methodologies to evaluate, regression-test, and tune autonomous agents for production systems.
Work with partner teams across Google to discover detection capabilities, improve operational sustainability, and increase the fidelity of security signals.
Participate in a global operation to hunt for and respond to security events, including large-scale incidents.