Senior Software Engineer, Security Command Center, Threat Detection

Google • Sunnyvale, CA

1d

About The Position

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

In this role, you will be responsible for the architecture and long-term strategy of our Google Cloud platform (GCP) threat detection ecosystem. You will lead the design of advanced AI models that identify sophisticated behavioral anomalies and define the security standards for our organizational AI resources. You will architect systems that are proactive, scalable, and resilient. You will act as a subject matter expert in machine learning (ML) security operations, guiding the team through technical issues, mentoring junior engineers, and collaborating with cross-functional stakeholders to ensure detection capabilities outpace the evolving threat landscape.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

The US base salary range for this full-time position is $166,000-$244,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google [https://careers.google.com/benefits/].

Requirements

• Bachelor’s degree or equivalent practical experience.
• 5 years of experience with software development in one or more programming languages.
• 3 years of experience testing, maintaining, or launching software products, and 1 year of experience with software design and architecture.
• 3 years of experience with developing large-scale infrastructure, distributed systems or networks, or with compute technologies, storage or hardware architecture.
• Experience in Machine Learning.
• Experience with back-end and infrastructure design.

Nice To Haves

• Master's degree or PhD in Computer Science or related technical field.
• 5 years of experience in software engineering.
• 3 years of experience in security engineering or ML/data engineering.
• Experience building or securing AI/ML pipelines, including knowledge of model protection, prompt injection mitigation, or anomaly detection modeling.
• Track record of designing and deploying scalable backend systems or detection engines that handle high-volume telemetry.

Responsibilities

• Design, develop, and deploy machine learning models specifically for anomaly detection and identifying abnormal behaviors across GCP services.
• Develop high-throughput data pipelines to ingest and analyze GCP telemetry (Cloud Logging, VPC flow logs, Cloud audit logs) for real-time threat identification.
• Develop and refine behavioral baselines to distinguish between legitimate administrative activity and potential adversary tactics.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level