Senior Security Engineer, Frontline Intrusion Operations

Google's Security team works to create and maintain a safer operating environment for its users and developers. The Senior Security Engineer will investigate and disrupt sophisticated cyber intrusions, develop adversary intelligence and reporting, automate investigative workflows, and integrate AI-driven tools to improve analysis.

Responsibilities:

• Synthesize complex intrusion data, telemetry, and OSINT to map and disrupt sophisticated adversary activities. Orchestrate multiple concurrent investigations, extracting high-fidelity methodologies and behavioral characteristics from technical datasets
• Lead comprehensive lead-exploitation efforts, merging disparate datasets to produce a holistic view of adversary Tactics, Techniques, and Procedures (TTPs). Collaborate across expert teams in high-tempo environments to cluster isolated events into actionable campaign intelligence
• Transform complex investigative findings into curated data models and client-facing reports that provide critical context and strategic attribution
• Drive team efficiency by architecting automated workflows and custom scripting solutions
• Pioneer the integration of AI-driven tools to enhance analysis speed and intelligence accuracy

Requirements:

• Bachelor's degree or equivalent practical experience
• 5 years of experience with security assessments or security design reviews or threat modeling
• 5 years of experience with security engineering, computer and network security and security protocols
• 5 years of experience coding in one or more general purpose languages
• Experience in graph theory, malware analysis, encoding/decoding, netflow and traffic analysis, timeline, log, or email analysis
• Experience in an investigative role, including experience in cyber threat analysis, incident response, or intrusion operations
• Experience in reverse engineering and security analysis
• Experience in network infrastructure, security, and application development