Security Engineering Manager, Detection and Response

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.

• 8 years of experience working in one or more of the following areas: security research, network security, intrusion detection systems, threat intelligence, threat modeling.

• Experience in one or more general purpose programming language like Python, Java, etc.

• Experience leading security engineering teams.

Preferred qualifications:

• 5 years of technical experience as an individual contributor security professional.

• Experience operating within cross-functional teams (e.g., Product, Engineering, Networks, Operations, Business Development).

• Experience with threat modeling.

About the job:

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You are a recognized expert in at least two security domains and use your leadership skills to manage a team that sets the direction and goals for solving Google-wide problems. You identify fundamental security problems at Google and drives major security improvements in Google infrastructure.

In this role, you will be conducting and leading others in security analysis, threat hunting, as well as malware and indicator analysis. You will manage and influence cross-organizational programs and stakeholders to land large-scale security projects. You will be responsible for working on malicious activity on Google's networks. You will perform analysis of threats on our enterprise, production, and cloud environments.The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company. Responsibilities:

• Manage a team responsible for intrusion detection and incident response.

• Inspire, grow, and develop talent while providing direction and setting direction for the team, and lead effectively through outcomes rather than tasks.

• Collaborate well with partner teams in Security, Engineering, and for large-scale response.

• Help define and execute strategy for detecting malicious activity from ever-evolving adversaries.

• Conduct ongoing detailed data analysis and risk assessment, security incident analysis, and overall direction for the program.