Security Engineer, Google Distributed Cloud Air-Gapped Compliance

Security Engineer, Google Distributed Cloud Air‑Gapped Compliance

Google - Sunnyvale, CA, USA

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. You will ensure Google Distributed Cloud air‑gapped (GDCag) meets compliance requirements for Public Sector, Defense Industry, Critical National Infrastructure, and Financial Sector customers by establishing governance frameworks aligned with NIST SP 800‑53‑FedRAMP and other standards for continuous compliance.

You will leverage integrated cloud services, machine learning technologies, and Kubernetes API‑based ecosystems with flexible hardware options. You will require specialized knowledge of GDC air‑gapped security protocols, architecture, security regulations, compliance controls, system‑level designs, and certification audits across commercial, U.S. government, foreign governments, and ISO standards, with the ability to craft narratives communicating these concepts effectively.

• Review and provide inputs about requirements across relevant regulatory frameworks and technical standards and determine their applicability to GDC air‑gapped.
• Conduct implementation reviews and report on their findings.
• Conduct risk assessments, identify opportunities for compliance process improvements, and lead engineering projects to implement solutions for monitoring, audit tooling, reporting, alerting, and evidence generation/collection.
• Oversee engineering projects from a technical compliance perspective, collaborate with engineering teams on security and compliance improvements, and advise on compliant and secure implementation options during design reviews.
• Participate in compliance meetings, contribute subject matter expertise for decision‑making and certification audits, support security assessments, develop an understanding of various compliance regimes (commercial, U.S. government, foreign governments, ISO), and assist with incident and vulnerability response.

• Bachelor's degree or equivalent practical experience.
• 8 years of experience with security assessments or security design reviews or threat modeling.
• 8 years of coding experience in one or more general purpose languages.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
• Experience with global compliance frameworks and accreditation (e.g., Fed Ramp High, ISO 27001, NIST 800‑53, AU‑ISM, etc.).

• Experience leveraging strong technical skills in a customer‑facing and strategic capacity.

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short‑Term Disability + Baby Bonding): 28‑30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Salary: US $207,000 – US $301,000 (USD) + 20% bonus target + equity + benefits.

Individual pay is determined by factors including job‑related skills, experience, and relevant education or training.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents‑to‑be, criminal histories consistent with legal requirements, or any other basis protected by law.

See also Google's EEO Policy , Know your rights:…