Security Engineer, Cloud Threat and Abuse Detection

Security Engineer, Cloud Threat and Abuse Detection corporate_fare Google place Sunnyvale, CA, USA bar_chart Mid Mid Experience driving progress, solving problems, and mentoring more junior team members; deeper expertise and applied knowledge within relevant area.

Minimum qualifications:

Bachelor's degree or equivalent practical experience. 2 years of experience with security assessments or security design reviews or threat modeling. 2 years of experience with security engineering, computer and network security and security protocols. 2 years of experience with coding in one or more general purpose languages.

Preferred qualifications:

5 years of experience working in one or more of the following areas: cloud security research, network security, intrusion detection system, threat intelligence, threat detection. Experience with host/memory based forensics and detections. Experience analyzing malicious network traffic. About the job Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. Cloud CISO Security Engineering(CCSE) is the team within the Cloud CISO organization responsible for helping ensure every product Cloud ships is as secure as it can be and increasing the assurance levels of security in the infrastructure underlying all our products. This team will also focus on increasing the capabilities of each product team to develop more secure products by design and by default, from patterns, tools and frameworks to increasing the skill level of embedded security leads. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about . Responsibilities Research new detection techniques to prevent/mitigate abusive activities such as outbound security attacks, botnet, DDoS and other malicious behaviors which violate Google Cloud Platform (GCP) terms of service. Develop high fidelity detection to identify malicious activity based on raw network and host level telemetry. Analyze various logs, packets to increase accuracy of detections. Hunt for threats/abusers and respond proactively. Create, develop and manage tools to collect and process abuse reports and threat intelligence data.