Senior Security Engineer, Google Public Sector

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• Experience delivering comprehensive security solutioning through design, coding, configuration, and deployment.
• Must possess an active Top Secret/SCI security clearance with current polygraph.

Preferred qualifications:

• 8 years of experience in a security operations role in incident response, threat hunting, and vulnerability management.
• 5 years of experience in a dedicated security operations role, with a proven track record of success in incident response, threat hunting, and vulnerability management.
• Applicable 8570/8140 certifications or relevant industry certifications.
• Certifications in CISSP, CySA+, CFR, GCFA, GCIH, GCIA, GDSA, GICSP, GSEC.
• Experience delivering comprehensive security solutioning through design, coding, configuration, and deployment.
• Understanding of cloud security principles and best practices, with experience in securing cloud environments.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

As a Senior Security Engineer on the U.S. Sovereign Cloud Security Operations team, you'll be a technical leader on the front lines, protecting Google Public Sector's most critical customers.

In this role, you'll be instrumental in defending our sovereign cloud environments. You'll lead incident response investigations, proactively hunt for advanced threats, and mature our vulnerability management program. This isn't just about responding to alerts; it's about building a more resilient defense. You'll improve our security infrastructure, automate our response capabilities, and mentor other engineers.

Responsibilities

• Take charge of security incident investigations from initial detection through to resolution and post-mortem analysis. Proactively hunt for emerging threats and malicious activity across the sovereign cloud environment.
• Design, build, and tune high-fidelity detection rules, analytics, and correlation searches within our Security Information and Event Management (SIEM) platform. Develop and implement Security Orchestration, Automation, and Response (SOAR) playbooks to automate response workflows.
• Own the technical aspects of the vulnerability management lifecycle. You will analyze scan results, prioritize vulnerabilities based on risk and environmental context.
• Engineer and maintain the critical security tools and infrastructure that power our security operations.
• Mentor other security engineers on the team, acting
  as a key escalation point for technical issues.