Security Engineer, Continuous Controls Monitoring

Security Engineer, Continuous Controls Monitoring

Corporate Fare Google Place New York, NY, USA ;
Kirkland, WA, USA ; +2 more ; +1 more

Experience driving progress, solving problems, and mentoring more junior team members; deeper expertise and applied knowledge within relevant area.

To apply, please submit your application through our career portal.

• Health, dental, vision, life, disability insurance
• Retirement benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years
• Sick Time: 40 hours per year (statutory, where applicable); 5 days per event (discretionary)
• Maternity leave (short‑term disability + baby bonding): 28‑30 weeks
• Baby bonding leave: 18 weeks
• Holidays: 13 paid days per year

Note:

By applying to this position you will have an opportunity to share your preferred working location from the following:
New York, NY, USA;
Kirkland, WA, USA;
Seattle, WA, USA
.

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with security assessments or security design reviews or threat modeling.
• 2 years of experience with security engineering, computer and network security, and security protocols.
• 2 years of coding experience in one or more general‑purpose languages.

• Experience in business intelligence and data analytics.

Our Security team works to create and maintain the safest operating environment for Google’s users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Team members are responsible for assessing the quality and ingesting available signals to support and validate the performance of the controls in the Cloud Controls Catalog. They develop a solid understanding of the control scope and implementation and assess available data signals to enable the monitoring. The data is onboarded onto the CCM platform where alerting, regression monitoring, and reporting are available, allowing various consumers to integrate the data into their security and compliance monitoring while also having transparency into the significance and potential limitations of the signals.

Deficiencies can consist of control deficiencies, signal or data limitations, platform or tooling, or a combination thereof. Team members document findings, provide guidance on resolutions, and work with the appropriate stakeholders (PSE, R&C, Product, CRE, horizontal teams, etc.) to ensure that any such findings receive appropriate visibility and ultimately get resolved.

This function is critical, ensuring via detection, alerts, and reports of any drift or changes in performance of critical controls that impact GCP’s security and compliance posture. The US base salary range for this full‑time position is $141,000‑$202,000 plus bonus, equity, and benefits. Individual pay is determined by location and additional factors, including job‑related skills, experience, and relevant education or training.

• Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
• Develop deep technical knowledge of control domains and implementations to document monitoring strategies that provide transparency and actionability for all stakeholders.
• Nurture partnerships with product and risk teams to communicate the value of security posture and empower stakeholders through improved visibility into organizational risks.
• Identify and evaluate data sources and lineage, proactively documenting constraints and providing mitigation recommendations to ensure accurate, high‑quality control measurement.
• Integrate data signals into monitoring platforms to enable regression alerting and create actionable dashboards that ensure ongoing compliance and a robust security posture.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we…