Security Engineer

About the Job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Uppercase is a specialized team of security engineers dedicated to identifying and mitigating threat actors before they can achieve their mission. Originating from Alphabet's moonshot factory and developed within Chronicle (now Google SecOps), we leverage skills in big data, cybersecurity, machine learning, and cloud computing to engineer next-generation security solutions. Our goal is to partner with the broader security community to ensure the advantage remains with those fighting cybercrime.Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Responsibilities

• Conduct technical threat actor behavior analysis and perform in-depth research into emerging threat activity.
• Work with partner teams across Google to discover and implement new detection capabilities.
• Write and optimize YARA-L rules to track and identify potentially malicious behavior.
• Maintain and scale detection engineering processes and tooling as needed.
• Innovate detection engineering strategies by leveraging LLM-based technologies and AI agents.

Minimum Qualifications

• Bachelor's degree or equivalent practical experience.
• 1 year of coding experience in one or more general purpose languages.
• 1 year of experience with security assessments or security design reviews or threat modeling.
• Experience with security engineering, computer and network security, and security protocols.

Preferred Qualifications

• Experience in security research, detection engineering, or adjacent work.
• Experience with signals development, threat hunting, and threat modeling on cloud data sources.
• Experience with security analysis tooling, including cloud audit logs and Security Information and Event Management (SIEM).

Key skills/competency

• Security Engineering
• Threat Modeling
• Detection Engineering
• Cybersecurity
• Machine Learning
• Cloud Computing
• Security Research
• SIEM
• YARA-L
• LLM