Security Engineer, Detection

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

In this role, you will build advanced and novel detection mechanisms for techniques, tactics, and procedures, developing systems to automate remediation, conducting threat hunting, and performing network and systems forensics, as well as malware and indicator analysis.

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Responsibilities:

• Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
  
• Participate in a global operation that monitors and responds to security events on Google networks.
• Perform investigations on a wide variety of events from various sources to determine whether they pose a threat.
• Participate in security incidents.
• Work with teams from around Google to discover new detection capabilities and logging sources.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 1 years of experience with security assessments or security design reviews or threat modeling.
• 1 years of experience with security engineering, computer and network security and security protocols.
• 1 years of coding experience in one or more general purpose languages.

Preferred qualifications:

• Experience with malware analysis, including investigations of botnet and root-kit behavior.
• Experience leading the analysis of sets and intrusion detection systems.