Google

Staff Security Engineer, Silicon Software

Google Mountain View, California, United States · $207K–$300K/yr

Software Development · 10,001+ employees

2 d ago
security Principal (10+ yrs) Full-time United States
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

Conduct offensive security assessments, vulnerability research, and penetration testing on Tensor SoC firmware and software. Partner with cross-functional teams to perform threat modeling, design reviews, and implement security mitigation strategies.

What they look for

Offensive security Penetration testing Threat modeling Vulnerability testing Code-level security auditing C C++ Python Rust Embedded software Device drivers Kernels Firmware Reverse engineering Static analysis Dynamic analysis

Requirements

Requires a bachelor's degree and at least 8 years of experience in offensive security engineering and coding in languages like C, C++, Python, or Rust. Candidates must also have 3 years of technical leadership experience and expertise in embedded software or firmware.

Benefits

Bonus Equity Health Insurance

Full description

Minimum qualifications:

  • Bachelor's degree or equivalent practical experience.
  • 8 years of experience with offensive security engineering (e.g., penetration testing, threat modeling, vulnerability testing, or code-level security auditing).
  • 8 years of coding experience in one or more general purpose languages (e.g., C, C++, Python, or Rust).
  • 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
  • Experience with embedded software, device drivers, kernels, or firmware.

Preferred qualifications:

  • Master's degree or PhD in Computer Science, or a related technical field.
  • Experience in reverse engineering, static analysis or dynamic analysis (Fuzzing) and exploit development.
  • Experience with security reviews, penetration testing, vulnerability analysis, finding and fixing security issues, etc.
  • Experience with commercial electronic devices, preferably smartphones.
  • Knowledge of security engineering, computer and network security, authentication, security protocols, and applied cryptography.

About the job:

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. As a Staff Security Engineer in Google's Silicon team, you will work in partnership with our development and product teams to ensure the security of the Tensor SoC and Pixel smartphones.

Google's mission is to organize the world's information and make it universally accessible and useful. Our team combines the best of Google AI, Software, and Hardware to create radically helpful experiences. We research, design, and develop new technologies and hardware to make computing faster, seamless, and more powerful. We aim to make people's lives better through technology.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $207000 - $300000 (USD) + 20% bonus target + equity + benefits

Learn more about benefits at Google. Responsibilities:

  • Conduct offensive security assessments, vulnerability research, and penetration testing across Tensor SoC firmware and software stacks.
  • Perform architecture and implementation-level threat modeling, design reviews, and security audits.
  • Develop automated testing tools, fuzzers, and exploits to identify and validate hardware and software vulnerabilities.
  • Partner cross-functionally with hardware, software, and product teams to design mitigation strategies and drive security best practices.
  • Apply system-level knowledge of software and hardware security to improve overall system security and attack resistance, proposing hardware/software mitigation strategies for vulnerabilities.

Similar roles