Senior Security Engineer, Android Anti-Malware

There's no such thing as a safe system - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

As a Security Engineer on the Android Anti-Malware Team, you will be protecting users by investigating and solving malware problems. You will also work with Android security teams, particularly those teams that work on app scanning and Google Play operations, to find new and creative ways to analyze and detect malware at scale. You will help shape the future of Android’s platform security and ecosystem.

The Platforms and Devices team encompasses Google's various computing software platforms across environments (desktop, mobile, applications), as well as our first party devices and services that combine the best of Google AI, software, and hardware. Teams across this area research, design, and develop new technologies to make our user's interaction with computing faster and more seamless, building innovative experiences for our users around the world.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $174000 - $252000 (USD) + 15% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities:

• Perform reverse engineering, analyze and detect malware at scale.
• Advocate security and secure practices throughout the Google Play and Android ecosystem.
• Conduct research to identify potential attack vectors against Android.
• Work with other team members to improve Android Security and Privacy's knowledge of malware and propose methods to detect and mitigate them.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
  
• 5 years of experience with security assessments or security design reviews or threat modeling.
  
• 5 years of experience with security engineering, computer and network security and security protocols.
  
• 5 years of coding experience in one or more general purpose languages.
  
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
  

Preferred qualifications:

• Experience in one or more of the following: Android reverse engineering (DEX, ARM), malware analysis, threat modeling, incident/emergency response, OS hardening, vulnerability management, pen testing, or cryptographic concepts.
• Android application development experience in C++, Java, or Kotlin.
• Foundational and in-depth technical knowledge of security engineering, computer and network security, authentication, security protocols, and applied cryptography.