Senior Security Engineer, Operational Technology, Cloud CISO

$161,000 - $239,000/Yr

Google - Reston, VA

Full-time - Mid Level

Reston, VA

Web Search Portals, Libraries, Archives, and Other Information Services

About the position

The Senior Security Engineer for Operational Technology at Google is responsible for ensuring the security of industrial control systems (ICS) and operational technology (OT) environments. This role involves conducting security assessments, designing secure architectures, and collaborating with software engineers to identify and mitigate vulnerabilities. The engineer will play a crucial role in enhancing the security posture of ICS/OT systems and will work closely with product design and operations teams to implement secure engineering practices.

Responsibilities

• Conduct comprehensive security assessments of existing ICS/OT environments to identify vulnerabilities, risks, and non-compliance with Google standards.
• Harden ICS/OT devices, networks, and applications to mitigate potential threats and vulnerabilities.
• Design and implement security architectures, controls, and processes to enhance the overall security posture of ICS/OT systems.
• Monitor and evaluate the effectiveness of security controls and processes.
• Research and recommend new security technologies and solutions to enhance the ICS/OT security program.

Requirements

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 3 years of experience in industrial control systems (ICS) and operational technology (OT) security.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Nice-to-haves

• OT Security Certifications.
• Experience with security assessments and pen testing for ICS/OT environments.
• Familiarity with regulatory and industry standards (e.g., NIST Cybersecurity Framework, ISA/IEC 62443, NERC CIP).
• Understanding of ICS/OT protocols, architectures, and devices (e.g., Modbus, DNP3, OPC, PLCs, SCADA, RTUs).

Benefits

• Base salary range of $161,000-$239,000 + bonus + equity + benefits.