Senior Software Engineer, Product Security Engineering, Cloud CISO

Google • Washington, DC

6h • $166,000 - $244,000

About The Position

Google's software engineers develop the next-generation technologies that change
how billions of users connect, explore, and interact with information and one
another. Our products need to handle information at massive scale, and extend
well beyond web search. We're looking for engineers who bring fresh ideas from
all areas, including information retrieval, distributed computing, large-scale
system design, networking and data storage, security, artificial intelligence,
natural language processing, UI design and mobile; the list goes on and is
growing every day. As a software engineer, you will work on a specific project
critical to Google’s needs with opportunities to switch teams and projects as
you and our fast-paced business grow and evolve. We need our engineers to be
versatile, display leadership qualities and be enthusiastic to take on new
problems across the full-stack as we continue to push technology forward.

We enable Cloud to grow securely. Product Security Engineering team within the
Cloud CISO organization is responsible for helping ensure every product Cloud is
as secure as it can be, and increasing the security in the infrastructure
underlying all our products. This team will also focus on increasing the
capabilities of each product team to develop more secure products by design and
by default, from patterns, tools and frameworks to increasing the skill level of
embedded security leads.

Google Cloud accelerates every organization’s ability to digitally transform its
business and industry. We deliver enterprise-grade solutions that leverage
Google’s cutting-edge technology, and tools that help developers build more
sustainably. Customers in more than 200 countries and territories turn to Google
Cloud as their trusted partner to enable growth and solve their most critical
business problems.

The US base salary range for this full-time position is $166,000-$244,000 +
bonus + equity + benefits. Our salary ranges are determined by role, level, and
location. Within the range, individual pay is determined by work location and
additional factors, including job-related skills, experience, and relevant
education or training. Your recruiter can share more about the specific salary
range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the
base salary only, and do not include bonus, equity, or benefits. Learn more
about benefits at Google [https://careers.google.com/benefits/].

Requirements

• Bachelor’s degree or equivalent practical experience.
• 5 years of experience with software development in one or more programming languages.
• 3 years of experience building software for data privacy or security (e.g., identity and access management).
• 3 years of experience testing, maintaining, or launching software products.
• 1 year of experience with software design and architecture.

Nice To Haves

• Master's degree or PhD in Computer Science, or a related technical field.
• 5 years of experience with data structures and algorithms.
• 1 year of experience in a technical leadership role.
• Experience developing accessible technologies.

Responsibilities

• Perform security reviews, research and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.
• Review designs and drive towards defense in depth and security by default, both with one-time reviews and longer term engagements.
• Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Respond to vulnerabilities with reproductions, variant analysis, mitigations, and hardening.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level