Security Engineer, Detection

Security Engineer, Detection

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

The Detection Team develops and maintains the signals, tools, and infrastructure that we use, constantly evolving them to match sophisticated attackers. We are responsible for managing all malicious activity on Google's networks. We perform deep analysis of threats on our corporate, production, and acquisition environments. This is the team at Google that hunts for and helps respond to advanced (APT) attackers and insider threats. Our goal is to build a fully automated detection and response machine an automated SOC.

As part of this team, you will be building advanced and novel detection mechanisms for attacker techniques tactics and procedures, developing systems to automate remediation, conducting threat hunting, and performing network and systems forensics, as well as malware and indicator analysis.

Minimum Qualifications

• Bachelor's degree or equivalent practical experience.
• 1 year of experience with security assessments or security design reviews or threat modeling.
• 1 year of experience coding in one or more general purpose languages.
• Experience with security engineering, computer and network security and security protocols.

Preferred Qualifications

• Experience with Cloud environments, such as Google Cloud Platform (GCP).
• Experience in advocating analysis of large data sets and intrusion detection systems.
• Experience with signals development, threat hunting, threat modeling.

Responsibilities

• Participate in a 24/7 global operation that hunts for and responds to security events on Google's networks.
• Perform investigations on a wide variety of events from various sources to determine whether they pose a threat to Google.
• Participate in security incidents.
• Work with teams from around Google to discover new detection capabilities and logging sources.

Key skills/competency

• Security Engineering
• Threat Detection
• Incident Response
• Cloud Security (GCP)
• Network Security
• Intrusion Detection Systems
• Threat Hunting
• Forensics
• Automation
• Coding (Python/Java/Go)