Staff Security Engineer, Product Security Engineering, Cloud CISO

• Perform security reviews, research and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.
• Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements. Look for vulnerabilities with techniques including reverse engineering, fuzzing, and static analysis.
• Respond to vulnerabilities with repos, mitigations, and hardening. Surface vulnerability patterns and design them out.
• Focus on the security strategy for Google Cloud and scalable solutions, and the ability to influence cross-organizationally.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
  
• 8 years of experience with security assessments or security design reviews or threat modeling.
  
• 8 years of experience with security engineering, computer and network security and security protocols.
  
• 5 years of coding experience in one or more general purpose languages.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
  

Preferred qualifications:

• Experience applying AI/ML to solve complex security problems.
• Ability to influence and engage with cross-functional teams and executive stakeholders, driving alignment and achieving results.
• Exceptional communication and people management skills with proven ability to take initiative and build strong, productive relationships externally and internally.

• Bachelor's degree or equivalent practical experience.
  
• 8 years of experience with security assessments or security design reviews or threat modeling.
  
• 8 years of experience with security engineering, computer and network security and security protocols.
  
• 5 years of coding experience in one or more general purpose languages.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.