Senior Security Engineer, Vulnerability Management

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
  
• 5 years of experience with security assessments or security design reviews or threat modeling.
  
• 5 years of experience with security engineering, computer and network security and security protocols.
  
• 5 years of coding experience in one or more general purpose languages.
  
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
  

Preferred qualifications:

• Experience in vulnerability management or in software supply chain security.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

In this role, in AutoVM's security program engineering group you are responsible for designing and supporting a variety of vulnerability management efforts. You will be focusing on Delivered Software (e.g., Chrome, Android, SDKs etc).

You will be working with a group of engineers addressing a set of technologies, expanding and maintaining our offering with a combination of standard and Google-specific technologies, supported by the bulk of AutoVM's global infrastructure and scanner engineering teams. You will balance security-heavy design with software engineering-focused execution, as AutoVM gets things done at scale through automated software components.

You will engage with executive stakeholder engagement across many Protect Areas (PAs), and resolve technical issues across the cyber security industry.

Responsibilities

• Manage a wide array of unsolved problems in vulnerability management in the AutoVM, Delivered Software Task Team, and ensure principal engineers run apt-get upgrades regularly.
• Understand real-world vulnerability management (VM) issues, including identifying the right scanners for each situation, optimizing scanning program success, and meeting the needs of various stakeholders across multiple Product Areas.
• Work on software that is directly shipped to customers, including Android and Chrome, designing and supporting vulnerability management solutions for key customer-visible codebases, in partnership with the relevant PAs.
• Balance security-heavy program design work with software engineering efforts, as all AutoVM execution is built on large-scale, software-heavy components.