Software Engineer, Chrome Fuzzing

Google • New York, NY

1d

About The Position

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward. With your technical expertise you will manage project priorities, deadlines, and deliverables. You will design, develop, test, deploy, maintain, and enhance software solutions. The Chrome Security team aims to provide the most secure platform to navigate the web by ensuring Chromium is secure by design and resilient to exploitation. The Fuzzing Team contributes to this by proactively identifying vulnerabilities before they can be exploited. The complexity of Chromium’s multi-process architecture creates a massive, unique attack surface requiring specialized fuzzing strategies. Chrome is dedicated to building a better, more open web. We’re focused on making a better browser (on both desktop and mobile) to help users take advantage of all the web has to offer in a safe and secure way.Chrome is available across all major platforms — iOS, Android, Windows, Mac, Linux and Chrome OS. We also built Chrome as an open source project so the entire web ecosystem could benefit from the latest innovations in speed, simplicity and security.

Requirements

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with software development in the C++ programming language.
• 1 year of experience in building software for data privacy or security.

Nice To Haves

• Master's degree or PhD in Computer Science or related technical field.
• 2 years of experience with data structures or algorithms in either an academic or industry setting.
• Experience building software in the Rust programming language.
• Experience contributing to the Chromium open-source project.
• Familiarity with web browser internals.
• Understanding of memory safety vulnerabilities and exploit primitives.

Responsibilities

• Take high-level security concepts (e.g., "The GPU process is a sandbox escape vector") and translate them into concrete engineering solutions: structure-aware fuzzers, custom sanitizer hooks etc.
• Design and implement structure-aware fuzzers for complex Chromium components.
• Analyze crashes identified by ClusterFuzz to determine security impact and remediation.
• Partner with the ClusterFuzz infrastructure team to ensure our tooling scales.
• Improve fuzzing engines to detect new bugs.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees