Staff Security Engineer

Google•Seattle, WA

6h•$207,000 - $300,000

About The Position

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. Our missions it to make GKE the most secure managed Kubernetes platform and is ready to run all container workloads safely out of the box. GKE, Google Kubernetes Engine, is a different kind of project in Cloud. Its core component—Kubernetes—which is also created and maintained by the team, is open source and has a vibrant community of external contributors. In this role, you will focus on security for components of our systems, such as client devices, networking equipment and server infrastructure, addressing threats from all sources. You will be working on securing and hardening the Kubernetes and GKE service using a risk based approach and strategically driving the team to achieve overall security.

Requirements

Bachelor's degree or equivalent practical experience.
8 years of experience with security assessments or security design reviews or threat modeling.
8 years of experience with security engineering, computer and network security and security protocols.
8 years of coding experience in one or more general purpose languages.
2 years of experience working with Kubernetes.

Nice To Haves

Experience in Cloud systems.
Contributed to open source software.

Responsibilities

Lead and scale the GKE Platform Security team to proactively address emerging infrastructure risks in the rapidly shifting agentic era.
Conduct deep-dive Kubernetes security reviews, research/reproduce vulnerabilities, and build threat models for next-generation features like the "Kubernetes for Agents" substrate.
Establish secure operational practices and deliver concrete security guidance to engineering teams to mitigate top product threats.
Conduct rigorous, ongoing design reviews to identify security gaps and collaborate across Google Security to build a comprehensive, long-term threat detection strategy.