Senior Security Engineer, Google Cloud

Google•Kirkland, WA

16h•$174,000 - $253,000

About The Position

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities. You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues. In this role, you will partner closely with Google central security teams (ISE, Cloud CISO, EIP, SST) to provide a full range of security services across these critical portfolio products. You will additionally build and operate security automation and secure-by-default frameworks for Looker specific tech stacks. You will be a close partner with both product and central security teams, leveraging your experience to ensure security is woven throughout the Software Development Life Cycle (SDLC) and setting an ever-higher security bar for Cloud. Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

Requirements

Bachelor's degree or equivalent practical experience.
5 years of experience with security assessments or security design reviews or threat modeling.
5 years of experience with security engineering, computer and network security and security protocols.
5 years of coding experience in one or more general purpose languages.
2 years of experience with security compliance.
1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Nice To Haves

2 years of experience with Cloud Security.
Experience with security controls.
Experience with information security incident and threat assessments (incident response, pen testing, vulnerability assessments).

Responsibilities

Review requirements changes across relevant regulatory frameworks and technical standards and determine their applicability to Google Data Centers (GDC).
Identify opportunities for compliance process improvements, initiate and drive engineering projects for their implementation (monitoring solutions, audit tooling, reporting and alerting, generations and collection of audit evidence).
Perform design reviews and advise engineering and compliance teams on compliant and secure implementation options.
Develop an understanding of compliance requirements across many different compliance regimes: commercial, U.S. government, foreign governments, ISO, and more.
Support incident and vulnerability response in collaboration with other products and security team at Google.