Offensive Security Engineer, Hardware/Firmware, Cloud CISO

$136,000 - $200,000/Yr

Google - Reston, VA

Full-time - Mid Level

Reston, VA

Web Search Portals, Libraries, Archives, and Other Information Services

About the position

As an Offensive Security Engineer within Google's Cloud CISO organization, you will play a crucial role in enhancing the security of hardware and firmware used in Cloud products. Your primary responsibility will be to conduct security assessments, identify vulnerabilities, and collaborate with internal teams and external vendors to ensure the highest security standards are met. This position requires a proactive approach to security, focusing on protecting sensitive data and maintaining a secure operating environment for users and developers.

Responsibilities

• Scope out and identify business critical hardware/firmware devices within Cloud for team review.
• Perform hardware and firmware security review of critical business devices (e.g., HSMs, Servers, Switches, SSDs).
• Present and campaign the risk findings and risk mitigation recommendations to technical and organizational leadership across different organizations.
• Inform vendors of the hardware and firmware vulnerabilities found in their devices.
• Partner and collaborate with device vendors via regular meetings and emails in order to advocate for necessary design changes to hardware and firmware for long-term improvements.

Requirements

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with security assessments or security design reviews or threat modeling.
• 2 years of experience with security engineering, computer and network security and security protocols.
• 2 years of coding experience in one or more general purpose languages.
• Experience with hardware and firmware security.

Nice-to-haves

• Experience with reverse engineering.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• 401(k) plan
• Paid holidays
• Paid time off
• Employee stock purchase plan
• Tuition reimbursement
• Professional development opportunities