Senior Security Engineer, Exploits, Google Threat Intelligence Group

Google is a leading technology company, and they are seeking a Senior Security Engineer for their Threat Intelligence Group. The role involves conducting research on threat actors, collaborating with various security teams, and leading projects to enhance security measures and mitigate risks.

Responsibilities:

• Own, prioritize, and drive the tracking of complex, threat actors and associated research projects
• Lead complex technical analyses, modeling threat activity, tactics, techniques, and procedures (TTPs), and indicators of compromise (IOCs) across internal platforms (mGraph)
• Create and deploy detection signatures (autoqueries, Watchtower rules) to maintain visibility over threat actors and assist in closing security gaps
• Produce polished, high-quality technical intelligence documentation and actor profiles to deliver actionable insights to internal and external stakeholders
• Influence technical direction within your scope, mentor junior engineers, and collaborate with cross-functional Google teams to support threat disruption efforts. Collaborate with security engineers and product teams in designing innovative exploit mitigations

Requirements:

• Bachelor's degree or equivalent practical experience
• 5 years of experience with security assessments or security design reviews or threat modeling
• 5 years of experience with security engineering, computer and network security and security protocols
• 5 years of coding experience in one or more general purpose languages
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment
• Experience with threat intelligence platforms and tools (e.g., VirusTotal, SIEMs)
• Proficiency in analyzing and correlating data from sources to track threat activity
• Knowledge of Android and Chrome security and internals
• Proven ability to lead complex threat research projects independently
• Skills in malware analysis, reverse engineering, or vulnerability analysis