Staff Software Engineer, Chrome Product Security, Core

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in software development.
• 5 years of experience with data privacy or security systems (e.g., authentication, authorization, identity and access management, data security, public key infrastructure).
• 5 years of experience testing, and launching software products.
• 3 years of experience with software design and architecture.

Preferred qualifications:

• Master’s degree or PhD in Engineering, Computer Science, or a related technical field.
• 8 years of experience with data structures/algorithms.
• 3 years of experience in a technical leadership role leading project teams and setting technical direction.
• 3 years of experience working in an organization involving cross-functional, or cross-business projects.
• Experience in security assessments, vulnerability management, security research, or vulnerability investigation and security development life-cycle.

About the job

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

With your technical expertise you will manage project priorities, deadlines, and deliverables. You will design, develop, test, deploy, maintain, and enhance software solutions.

In this role, you will lead the Chrome Security team with responsibilities and operations ranging from vulnerability to life-cycle and Vulnerability Rewards Program (VRP) to security tooling and data analysis. You will ensure effective and timely communication during security emergencies to Chrome leadership, internal teams, Google communications, and external partners. You will represent Chrome Product Security in engagements with other Google security teams and external industry partners on shared vulnerabilities and disclosure coordination.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

The US base salary range for this full-time position is $197,000-$291,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Lead work across the Product Security team and relevant projects in the wider Chrome Security team.
• Interface with the wider Chrome Security team and all of Chrome to ensure we have the necessary tools and data to support key decision making across the entire organization.
• Translate high-level security into concrete by driving comprehensive vulnerability life-cycle management, advancing critical security automation and tooling, leading incident response for severe threats, and fostering security practices and collaboration across all Chrome engineering teams.
• Partner with Technical Program Management (TPM) counterparts on improving processes and supporting tooling.