Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.
In this role, you will improve the isolation and hardening properties of Google Cloud to ensure that Google Cloud is the most secure and transparent Cloud. You will identify and resolve risks affecting the broader industrial control systems (ICS)/operational technology (OT) space of Google data centers, as well as other relevant infrastructure and platform security areas, supporting Google Cloud mission of being the most secure Cloud.
Responsibilities
- Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
- Conduct comprehensive security assessments to identify risks, vulnerabilities, and non-compliance with Google standards across infrastructure and platform layers.
- Develop strategies and roadmaps to identify area of risks and to drive remediation, aligning with business objectives.
- Review designs and provide security guidance to improve security of Industrial Control Systems (ICS)/Operational Technology (OT) environments of data centers and management platforms.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 5 years of experience with security assessments or security design reviews or threat modeling.
- 5 years of experience with security engineering, computer and network security and security protocols.
- 5 years of coding experience in one or more general purpose languages.
- 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
Preferred qualifications:
- Experience on Industrial Control Systems (ICS) and Operational Technology (OT) security.
- Experience consulting product teams on security issues throughout their entire product life-cycle.
- Experience securing cloud and on-premise infrastructure (e.g., networking, virtualization) and platforms (e.g., OS hardening, containers, and orchestration).
- Understanding of both offensive and defensive security methods.