Senior Technical Program Manager, GCP Security Response Operations

Minimum qualifications:

• Bachelor's degree in a technical field, or equivalent practical experience.
• 8 years of experience in program management.
• 8 years of experience in security.
  
• 3 years of experience in composure and level headedness during security escalations and leading the teams towards resolution.
• 3 years of experience in security operations, systems administration, digital forensics, security engineering, privacy engineering.
• Experience in working with cross-functional teams.

Preferred qualifications:

• Experience with incident or emergency response coordination.
  
• Experience in a specialized security operations domain (e.g., Digital Forensics, Incident Management, Threat Intelligence, etc.).
• Experience in customer facing incident response roles (e.g., Managed Security Services Provider (MSSP), consulting, SOC, etc.).
• Experience in defensive engineering, implementing and operationalizing tools such as SIEMs, IPS/IDS, DFIR tools, security detections, etc.
• Experience with one or more programming/query languages (e.g., Python, Go, C/C++ or JavaScript, Bash, Powershell, SQL, etc.).

About the job

A problem isn’t truly solved until it’s solved for all. That’s why Googlers build products that help create opportunities for everyone, whether down the street or across the globe. As a Technical Program Manager at Google, you’ll use your technical expertise to lead complex, multi-disciplinary projects from start to finish. You’ll work with stakeholders to plan requirements, identify risks, manage project schedules, and communicate clearly with cross-functional partners across the company. You're equally comfortable explaining your team's analyses and recommendations to executives as you are discussing the technical tradeoffs in product development with engineers.

The mission of the Google Cloud Platform (GCP) Security Response Operations (GSRO) team is to develop and govern, at an enterprise level, a continuous identification and analysis of threats in Cloud and to respond to imminent and critical vulnerabilities until containment, avoiding further escalation or internal/external outrage.

In this role, you will focus on continuously identifying and analyzing security threats within GCP, rapidly responding to and managing imminent and critical vulnerabilities. You will also contain these threats to prevent broader escalation or public/customer outrage. You will collaborate across Product, Engineering, Legal, and Support teams to achieve rapid remediation.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

The US base salary range for this full-time position is $183,000-$271,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Ensure all leadership/stakeholders are aware of progress/blockers on a continuous basis, drive strategic and tactical decisions throughout all organizations and levels.
• Manage multiple cross-functional efforts and escalations simultaneously with competing priorities. Drive consistency between Cloud and central processes.
• Drive alignment of goals and objectives, evaluate and report multiple projects, organize cross-project work, and define program controls/governance/standards.
• Lead various cross-functional teams, spanning multiple organizational levels and functional areas to assess and respond to reported vulnerabilities and escalations from bug bounty programs.
  
• Use technical judgment to drive outcomes, technology reviews, challenge proposals and build consensus.