Staff Security Engineer Manager, Cloud Abuse Security Engineering

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.

• 8 years of experience with security assessments or security design reviews or threat modeling.

• 8 years of experience with security engineering, computer and network security and security protocols.

• 8 years of coding experience in one or more general purpose languages.

• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

• Experience in people management.

Preferred qualifications:

• 10 years of experience with software development in one or more programming languages (e.g., Python, C, C++, Java, Javascript).

• 5 years of experience in a technical leadership role; overseeing strategic projects, with 3 years of experience in a people management, supervision/team leadership role.

• Experience in security engineering, focusing on abuse detection, network security, or threat intelligence.

About the job:

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You are a recognized expert in at least two security domains and use your leadership skills to manage a team that sets the direction and goals for solving Google-wide problems. You identify fundamental security problems at Google and drives major security improvements in Google infrastructure.

Cloud CISO is responsible for ensuring that every Google Cloud product ships as secure as it can be. Cloud CISO owns and drives the product security strategy for Google Cloud. We work with almost every aspect of Google’s infrastructure and on solving truly planet scale infrastructure security problems that have societal level impacts.

The Cloud Abuse Security Engineering team (CASE), within Cloud CISO, is dedicated to detecting, preventing, and mitigating all forms of abuse in GCP products. The mission is to safeguard Google, its customers, users, and the internet from threats originating within Google Cloud.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $207000 - $300000 (USD) + 20% bonus target + equity + benefits

Learn more about benefits at Google. Responsibilities:

• Manage, mentor, and develop a high-performing team of security engineers dedicated to safeguarding Google Cloud, its customers, and the internet from platform abuse.

• Define and execute the technical roadmap for the CASE team. Shape the strategy for generating actionable intelligence and insights to detect, mitigate, and prevent abusive behaviors originating from GCP.

• Guide the architectural direction and engineering efforts in researching new detection techniques. Ensure the successful delivery of scalable, high-fidelity detection systems that identify malicious activities (such as botnets, DDoS, and outbound attacks) using network and host-level telemetry.

• Act as a strategic partner to Google Cloud product teams, Google Cloud Support and Business Platform, Trust and Safety, Legal, and broader leadership. 

• Oversee the lifecycle of internal tools and infrastructure used to collect, process, and analyze abuse reports and threat intelligence data at planet scale.