Senior Security Engineer, Google Cloud

About the job

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

In this role, you will partner closely with Google central security teams (ISE, Cloud CISO, EIP, SST) to provide a full range of security services across these critical portfolio products. You will additionally build and operate security automation and secure-by-default frameworks for Looker specific tech stacks. You will be a close partner with both product and central security teams, leveraging your experience to ensure security is woven throughout the Software Development Life Cycle (SDLC) and setting an ever-higher security bar for Cloud.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

Responsibilities

• Review requirements changes across relevant regulatory frameworks and technical standards and determine their applicability to Google Data Centers (GDC).
• Identify opportunities for compliance process improvements, initiate and drive engineering projects for their implementation (monitoring solutions, audit tooling, reporting and alerting, generations and collection of audit evidence).
• Perform design reviews and advise engineering and compliance teams on compliant and secure implementation options.
• Develop an understanding of compliance requirements across many different compliance regimes: commercial, U.S. government, foreign governments, ISO, and more.
• Support incident and vulnerability response in collaboration with other products and security team at Google.