Senior Security Engineer, Global Risk, Privacy and Compliance

Google•Durham, NC

6d•$174,000 - $252,000

About The Position

The Senior Security Engineer will work within Google’s Security team to help maintain a safe operating environment for users and developers. The role partners with software engineers to identify and address security flaws and vulnerabilities, and works on security engineering and risk initiatives across Google Cloud products. It focuses on advancing Cloud Controls Uplift Strategy and Control Reporting Expansion, establishing Comply as an authoritative control catalog aligned with ESF (NIST 800-53), and improving technical controls and assurance through automation, reporting, and cross-functional remediation. The role also provides technical leadership and mentorship to junior engineers. Google Cloud delivers enterprise-grade solutions and tools to customers in more than 200 countries and territories. Individual pay is determined by job-related skills, experience, and relevant education or training. Compensation in the US is $174,000–$252,000, plus a 15% bonus target, equity, and benefits.

Requirements

Bachelor’s degree or equivalent practical experience.
5 years of experience with security assessments, security design reviews, or threat modeling.
5 years of experience with security engineering, computer and network security, and security protocols.
5 years of coding experience in one or more general-purpose languages.
1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
Experience interpreting and implementing controls mapped to industry frameworks and regulatory standards, such as NIST SP 800-53, SOC 2, ISO/IEC 27001, and GDPR.

Nice To Haves

Experience defining, implementing, and measuring Key Control Indicators to move compliance systems from reactive audits to proactive engineering assurance.
Experience streamlining control portfolios by consolidating disparate platform controls and standardizing them against centralized frameworks.
Familiarity with AI-driven tools for automating control-language harmonization, policy alignment, or complex security reporting.
Exceptional communication and relationship-building skills, including partnering with executive stakeholders to drive system remediation and root-cause analysis.
Strong scripting or software development skills, such as Python, Go, or SQL, and ability to design, implement, and automate security monitoring systems or compliance-as-code platforms such as Comply or RDP.

Responsibilities

Drive multi-quarter technical initiatives under the Cloud Controls Uplift Strategy and Control Reporting Expansion, establishing Comply as the single authoritative catalog aligned with ESF (NIST 800-53).
Perform complex technical risk assessments, system design reviews, and threat modeling across Google Cloud products to identify security vulnerabilities and compliance gaps.
Translate regulatory standards, including ISO 27001, SOC 2, NIST, and GDPR, into actionable technical control specifications.
Design, implement, and automate security controls and reporting mechanisms, using AI to streamline language and reduce catalog complexity.
Define Key Control Indicators and publish tailored Control Performance and Coverage Reports to drive accountability.
Lead cross-functional remediation efforts and perform root-cause analysis to address underlying system-wide security risks.
Provide technical leadership and mentorship to junior engineers and set technical direction for controls engineering and assurance across the team.