Security Engineer, Security Surveillance

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

The Security Surveillance team monitors Google’s network and systems for threats to information security. We strive to accomplish this in the least intrusive way possible, protecting Google’s culture and innovative practice.

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Participate in a 24/7 global operation that hunts for and responds to security events on Google's networks.

Perform investigations on a wide variety of events from various sources to determine whether they pose a threat to Google.

Work with teams from around Google to discover new detection capabilities and logging sources.

Design, develop, and deploy scalable software systems and frameworks to automate complex security workflows.

Research and implement AI/ML techniques for security applications, including the development and tuning of LLM-based autonomous agents.

Minimum qualifications:

Bachelor's degree or equivalent practical experience.

1 year of experience with security assessments or security design reviews or threat modeling.

1 year of experience with programming in Python, Go, C/C++, or Java.

Experience with security engineering, computer and network security and security protocols.

Preferred qualifications:

3 years of relevant work experience, including experience in responding to security problems in target-rich environments, looking at security alerts, front-line analysis, and response.

Expertise in the analysis of large data sets and intrusion detection systems.

Expertise with signals development, threat hunting, and threat modeling.

Knowledge of modern AI/ML frameworks and tools, including experience in prompt engineering.