Minimum qualifications:

• BS degree in Computer Science, or a related technical field, or equivalent practical experience.
• 2 years of experience in application-level vulnerability testing and code-level security auditing.

Preferred qualifications:

• MS in Computer Science or a related technical field.
• Relevant work experience in penetration testing or red teaming.
• Software development experience in C , Java, or Python.
• Technical knowledge of security engineering, computer and network security, authentication, security protocols and applied cryptography.
• Self-motivated and results-oriented.
• Effective interpersonal and communication skills.

About the job

Product Security Assurance is the team within the Cloud Chief Information Security Officer (CISO) organization responsible for helping ensure every product Cloud ships is as secure as it can be and increasing the assurance levels of security in the infrastructure underlying all our products. This team also focuses on increasing the capabilities of each product team to develop more secure products by design and by default, from patterns, tools and frameworks to increasing the skill level of embedded security leads. As an Information Security Engineer you will help to ensure that our software and systems are designed and implemented to the highest security standards. You will perform technical security assessments, code reviews and vulnerability testing to highlight risk, helping Google teams and partners to improve security, and work on a wide variety of software designs and technology stacks.

Because we are new, you have the opportunity to help set the direction for product security in Google Cloud and partner with amazing existing teams across Google. These include existing security teams, privacy teams and engineering teams. Help set the focus, direction and impact of this organization with regards to product security. There is an exciting mix of work to be accomplished across multiple security domains, for example: security reviews, security education, web application scanning and testing, vulnerability research, and security data analysis, all with the goal of highlighting and driving down risk.

Google Cloud provides organizations with leading infrastructure, platform capabilities and industry solutions. We deliver enterprise-grade cloud solutions that leverage Google's cutting-edge technology to help companies operate more efficiently and adapt to changing needs, giving customers a foundation for the future. Customers in more than 150 countries turn to Google Cloud as their trusted partner to solve their most critical business problems.

Additional Information
(Colorado only*) Minimum salary of $114,000 bonus equity benefits.
*Note: Disclosure as required by sb19-085 (8-5-20) of the minimum salary compensation for this role when being hired into our offices in Colorado.

Responsibilities

• Perform security reviews, research and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers
• Review and develop secure operational practices, and provide security guidance for engineers and support staff
• Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements
• Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis
• Respond to vulnerabilities with repros, mitigations, and hardening