Senior Security Engineer, Firmware Security, Cloud CISO

Senior Security Engineer, Firmware Security, Cloud CISO

Google
Locations:
Kirkland, WA;
Seattle, WA;
Sunnyvale, CA

Our Security team works to create and maintain the safest operating environment for Google’s users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Cloud CISO Security Engineering (CCSE) is the team within the Cloud CISO organization responsible for helping ensure every product Cloud offers is as secure as it can be. We are also responsible for increasing the assurance levels of security in the infrastructure underlying all our products, and for increasing the skill level of embedded security leads.

As a Senior Security Engineer, you will help to ensure that our software and systems are designed and implemented to the highest security standards. You will perform technical security assessments, code reviews and vulnerability testing to highlight risk, helping Google teams and partners to improve security, and work on a wide variety of software designs and technology stacks.

• Leverage Gemini and other AI tools to analyze products, identify risks and create remediation strategies.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.
• Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements.
• Look for vulnerabilities with techniques including agentic AI scanning, reverse engineering, fuzzing, and static analysis.
• Surface vulnerability patterns and design them out. Focus on the security strategy for Google Cloud.

• Bachelor’s degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

• Knowledge of security engineering, computer and network security, authentication, security protocols, and applied cryptography.

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Salary: US: $174,000 - $253,000 (USD) + 15% bonus target + equity + benefits.

English proficiency is required for all roles unless otherwise stated.

Google is a proud equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc.

stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.