Senior Security Engineer, Digital Forensics

Google•San Jose, CA

5d•$174,000 - $252,000

About The Position

Google’s Security team works to create and maintain a safer operating environment for users and developers. Security Engineers help protect network boundaries, harden computer systems and network devices, protect sensitive data, and work with software engineers to identify and fix security flaws and vulnerabilities. The role uses industry experience to own and drive the resolution of complex security incidents, policy questions, and technical security issues. As part of Google’s Security Response team, this position investigates and responds to escalations from across Alphabet. The team detects and responds to threats 24/7 across three regions. The role is part of a global on-call response team and uses broad security experience and Digital Forensic and Incident Response (DFIR) expertise. The successful candidate will develop broad forensic investigation and crisis management skills, with the opportunity to specialize in one area as their career grows.

Requirements

Bachelor's degree or equivalent practical experience.
5 years of experience with security assessments, security design reviews, or threat modeling.
5 years of experience with security engineering, computer and network security, and security protocols.
5 years of coding experience in one or more general-purpose languages.
4 years of practical experience with digital forensic analysis.

Nice To Haves

Experience with and detailed understanding of digital forensics and incident response tools such as GRR, Plaso (log2timeline), The Sleuth Kit (TSK), libyal, Guidance Encase, AccessData FTK, X-Ways Forensics, Cellebrite, Crowdstrike Falcon, Volatility, or Mandiant MIR.
Experience with reverse engineering or firmware analysis.
Experience with the current threat landscape, including common attack types and malware capabilities.
Experience with the security of two or more operating systems, such as Android, Linux, or Mac OS X.

Responsibilities

Investigate security and privacy events from a wide variety of sources to determine whether they pose a threat to Google.
Respond to security and privacy incidents, write incident reports, and participate in post-mortems.
Participate in internal training to ensure forensic best practices are followed.
Work with teams across Google to discover new investigative and forensics capabilities.
Develop internal and open-source tools, including digital forensic toolkits, to support incident response in Google’s environment.