Security Engineer, Infrastructure Detection

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $147000 - $210000 (USD) + 15% bonus target + equity + benefits

Learn more about benefits at Google . Responsibilities

• Design, develop, and deploy scalable software systems and frameworks to automate complex security workflows and engineer autonomous defenses that protect against external attacks and insider risks.

• Re-engineer and optimize a broad set of complex security detections to safeguard Google's core compute, network, and data platforms.

• Apply data-driven methodologies to perform evaluation, regression testing, and tuning of autonomous agents for production systems.

• Work with partner teams from around Google to discover new detection capabilities, improve operational sustainability, and continuously increase the fidelity of our security signals.

• Participate in a global operation to hunt for and respond to security events, including large-scale security incidents.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.

• 2 years of experience with security engineering, computer and network security and security protocols.

• 2 years of experience with security assessments or security design reviews or threat modeling.

• 2 years of experience coding in one or more general purpose programming languages.

• Experience in cyber threat engineering (e.g., vulnerability research, exploit development, reverse engineering, malware analysis, threat modeling, code-level security auditing).

• Experience in a technical security role (e.g., security engineering, security research, DevSecOps, incident response, SOC analyst, incident response, malware research, threat analysis).

Preferred qualifications:

• Experience driving operational continuity and detection fidelity in infrastructure environments.

• Experience executing on intermediate software engineering tasks, with an interest in managing technical projects.

• Experience in systems engineering, virtualization, and Linux.

• Experience in implementing, administering, or troubleshooting network infrastructure devices (e.g., firewalls, routers, switches, wireless, network monitoring tools).

• Knowledge of intrusion detection, network hardening, and threat intelligence.

• Knowledge of data evaluation and regression testing for production systems.