Principal Engineer, Google Compute Platform Security

• Serve as the overall technical authority and executive owner for GCE Platform Security, defining and driving the multi-year security strategy across distributed global control planes and low-level node data planes. 
• Formulate architectural and operational defenses to counter the rapid emergence of autonomous agentic threat vectors and LLM-assisted exploitation tools, establishing automated vulnerability discovery, proactive mitigation frameworks, and rapid incident response capabilities across the fleet.
• Architect robust, hardware-level defenses and isolation boundaries to eliminate and mitigate hardware CPU vulnerabilities, speculative execution side-channels, transient execution threats, and cross-tenant leakage
• Lead security defenses and privilege reduction across hypervisor technologies, virtual machine monitors (VMMs), host kernels, and low-level runtimes, implementing sandboxing and defense against virtualization escapes.
• Drive the architectural outlook for host security and isolation, advancing host deprivileging, zero-trust host architectures, hardware-assisted offloading of security and lifecycle functions.

Minimum qualifications:

• Bachelor’s degree in Computer Science, Computer Engineering, or equivalent practical experience.
• 15 years of professional software development experience, or 13 years with an advanced degree.
• Experience architecting, developing, and securing low-level systems software across the virtualization and operating systems stack (e.g., hypervisors such as KVM/Cloud Hypervisor/QEMU, Linux kernel internals, VMMs, firmware, or hardware-assisted virtualization).

Preferred qualifications:

• Advanced degree (Master’s or PhD) in Computer Science, Computer Engineering, Cybersecurity, or a related technical field.
• 20 years of software engineering experience, with experience with industry leadership in cloud platform security, hypervisor security, hardware/CPU security, or operating system defense.
• Experience anticipating and defending against emerging adversarial capabilities, including AI/LLM-accelerated vulnerability discovery, automated exploit synthesis, and autonomous agentic threat vectors.
• Experience in cross-organizational technical leadership, executive communication, and building consensus across large, multi-disciplinary engineering organizations (Hardware/Silicon).
• Expertise in hardware-software security co-design, including CPU microarchitectural vulnerability mitigation (speculative execution, side-channel analysis), hardware root-of-trust, vTPM, and Confidential Computing.

• Bachelor’s degree in Computer Science, Computer Engineering, or equivalent practical experience.
• 15 years of professional software development experience, or 13 years with an advanced degree.
• Experience architecting, developing, and securing low-level systems software across the virtualization and operating systems stack (e.g., hypervisors such as KVM/Cloud Hypervisor/QEMU, Linux kernel internals, VMMs, firmware, or hardware-assisted virtualization).