Staff Security Engineer, Google Threat Intelligence Group

Google

18h•$207,000 - $300,000

About The Position

The Staff Security Engineer will work on the Disruption Team within the Google Threat Intelligence Group (GTIG). The team works to significantly degrade threat actors’ missions, operations, and capabilities, focusing on major nation-state and criminal actors targeting Google users, customers, and the broader online ecosystem. It identifies and refines disruption opportunities using technical and nontechnical capabilities, prioritizing based on expected impact to threat actors and users. The role partners with GTIG Threat Operations, Intel Delivery, product and abuse teams across Alphabet, and external stakeholders including governments and industry partners. It also contributes to Google’s broader security work by monitoring systems for attacks and intrusions and working with software engineers to proactively identify and fix security flaws and vulnerabilities.

Requirements

Bachelor’s degree or equivalent practical experience.
8 years of experience with security assessments, security design reviews, or threat modeling.
8 years of experience with security engineering, computer and network security, and security protocols.
8 years of coding experience in one or more general-purpose languages.
3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Nice To Haves

Experience in computer security or threat intelligence, including developing and deploying security capabilities such as host or network monitoring, network analysis, offensive security, or vulnerability remediation.
Experience investigating computer intrusions.
Experience in stakeholder management, including leading, presenting, and reporting to numerous audiences, including executives.

Responsibilities

Identify security issues and design and implement security controls, tools, and services to improve security systems and processes.
Engage across GTIG and Alphabet to identify, vet, and refine disruption opportunities, working closely with GTIG Mission Tech Leads, Threat Operations, Intel Delivery, and Product Areas.
Analyze data to build a comprehensive picture of threat actor infrastructure, malware, tactics, organizational structure, and other relevant factors in support of disruption planning.
Advocate for the GTIG Disruption program and develop relationships across Alphabet, external security and technology companies, nonprofit organizations, internet hosting providers, and government and law enforcement organizations globally.
Identify opportunities to automate disruption of malicious activity and support efforts to improve systems.