Security Engineer, Google Public Sector

Security Engineer, Google Public Sector

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

As a Security Engineer, you're not just reacting to threats, you're anticipating them. You'll manage cybersecurity operations, leading the development and implementation of advanced security strategies to protect our critical assets in a dynamic threat landscape and also identify security issues and implement and design security controls, tools, and services to improve security systems and processes. This position requires that the candidate selected be eligible to obtain, or currently possess and maintain an active "TS/SCI with a Polygraph". The position further requires the candidate will obtain a commensurate clearance for each government agency for which they perform GPS work. Failure to maintain (or obtain, if applicable) the appropriate U.S. Government clearance or customer screening requirements that results in the employee unable to perform the requirements of the role, may result in employment action up to and including termination.

Google Public Sector brings the magic of Google to the mission of government and education with solutions purpose-built for enterprises. We focus on helping United States public sector institutions accelerate their digital transformations, and we continue to make significant investments and grow our team to meet the complex needs of local, state and federal government and educational institutions.

The US base salary range for this full-time position is $166,000-$244,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• Experience delivering comprehensive security solutioning through design, coding, configuration, and deployment.
• Active US Government Top Secret/Sensitive Compartmentalized Information (TS/SCI) security clearance with polygraph.
• Ability to travel up to 25% of the time internationally.

Preferred qualifications:

• Certifications in CISSP, CISM, GCIH, GCIA, or OSCP.
• 8 years of experience in a security operations role in incident response, threat hunting, and vulnerability management.
• Experience in a regulated industry (e.g., finance, healthcare, government).
• Understanding of cloud security principles and best practices, with experience in securing cloud environments.
• Ability to contribute to the security community (e.g., open-source projects, blog posts, conference presentations).

Responsibilities:

• Develop and implement security monitoring strategies, incident response plans, and security awareness programs (e.g., National Institute of Standards and Technology (NIST), Information Security Management System (ISO 27001), Payment Card Industry Data Security Standard (PCI DSS).
• Oversee the deployment and operation of Security Information and Event Management (SIEM) systems, Intrusion Detection/Prevention Systems (IDS/IPS).
• Lead incident response efforts, including investigation, containment, eradication and recovery.
• Conduct forensic analysis of security incidents and develop and deliver post-incident reports and recommendations.
• Deliver security solutioning through design, coding, configuration, and deployment.

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.

If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.