Security Engineer, Continuous Controls Monitoring

Google • New York, NY

15h

About The Position

Our Security team works to create and maintain the safest operating environment
for Google's users and developers. Security Engineers work with network
equipment and actively monitor our systems for attacks and intrusions. In this
role, you will also work with software engineers to proactively identify and fix
security flaws and vulnerabilities.

Team members are responsible for assessing the quality, and ingesting available
signals to support/validate the performance of the controls in the Cloud
Controls Catalog. Team members develop a solid understanding of the control
scope, implementation and assess available data signals to enable the
monitoring. Finally the data is on boarded onto the CCM platform where alerting,
regression monitoring and reporting is available allowing various consumers to
integrate the data into their security and compliance monitoring, while at the
same time having transparency into the significance but also potential
limitations of the signals.

Deficiencies can consist of control deficiencies, signal/data limitations,
platform or tooling, or a combination thereof. Team members document the
findings, provide guidance on resolutions, and work with the appropriate
stakeholders (PSE, R&C, Product, CRE, horizontal teams, etc.) to ensure that any
such findings receive the appropriate level of visibility and ultimately get
resolved.

This function is a critical one that ensures via detection, alerting and
reporting of any drift or changes in performance of critical controls that
impact GCP’s security and compliance posture.

Requirements

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with security assessments or security design reviews or threat modeling.
• 2 years of experience with security engineering, computer and network security and security protocols.
• 2 years of coding experience in one or more general purpose languages.

Nice To Haves

• Experience in business intelligence and data analytics.

Responsibilities

• Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
• Develop deep technical knowledge of control domains and implementations to document monitoring strategies that provide transparency and actionability for all stakeholders.
• Nurture partnerships with product and risk teams to communicate the value of security posture and empower stakeholders through improved visibility into organizational risks.
• Identify and evaluate data sources and lineage, proactively documenting constraints and providing mitigation recommendations to ensure accurate, high-quality control measurement.
• Integrate data signals into monitoring platforms to enable regression alerting and create actionable dashboards that ensure ongoing compliance and a robust security posture.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level