Senior Security Engineer, Cloud Threat Detection

About the position

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. Google Cloud Product Security Engineering (PSE) is responsible for ensuring that every Google Cloud product ships as secure as it can be. PSE owns and drives the product security strategy for Google Cloud. We work with almost every aspect of Google's infrastructure and on solving truly planet scale infrastructure security problems that have societal level impacts. The Cloud Advanced Security Engineering team, within PSE, is dedicated to detecting, preventing, and mitigating all forms of threats in GCP products. Our mission is to safeguard Google, its customers, users, and the internet from threats originating within Google Cloud. As a Security Engineer on the Cloud Advanced Security Engineering team in a PSE, you will be a part of the team that's responsible for protecting Google and its users from attacks and abuses originating from Google Cloud Platform. You will ensure trust and reputation not only for this product, but also for Google as a broader brand and company. You will work globally and cross-functionally with several internal stakeholders.

Responsibilities

• Research new detection techniques to prevent/mitigate abusive activities such as outbound security attacks, botnet, Denial-of-Service (DDoS) and other malicious behaviors which violate GCP's Terms of Service.
• Develop high fidelity detection to identify malicious activity based on raw network and host level telemetry.
• Analyze various logs and packets to increase accuracy of detections.
• Hunt for threats/abusers and respond proactively.
• Create, develop and manage tools to collect and process abuse reports and threat intelligence data.

Requirements

• Bachelor's degree or equivalent practical experience.
• 8 years of experience with security assessments or security design reviews or threat modeling.
• 8 years of experience with security engineering, computer and network security and security protocols.
• 8 years of coding experience in one or more general purpose languages.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Nice-to-haves

• Knowledge of defensive security concepts such as adversity tactic and technique, MITRE ATT&CK framework, logging etc.

Benefits

• Bonus
• Equity
• Health benefits