Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.
The Google Public Sector (GPS) Cyber Defense and Security Operations (CDSO) Group leads our Security Operations function for a range of GPS platforms and services. Combining Mandiant's deep security expertise with Google technologies, our team sets the standard in Security Engineering, Assessment, and Operations across Government Cloud programs.
Google Public Sector brings the magic of Google to the mission of government and education with solutions purpose-built for enterprises. We focus on helping United States public sector institutions accelerate their digital transformations, and we continue to make significant investments and grow our team to meet the complex needs of local, state and federal government and educational institutions.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.
US: $174000 - $253000 (USD) + 15% bonus target + equity + benefits
Learn more about
benefits at Google.
Responsibilities
- Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
- Create custom AI-driven detections and workflows. Lead the design of automated, AI-native offensive tools and simulation frameworks to identify vulnerabilities at scale.
- Implement monitoring strategies, response plans, and awareness programs. Optimize SIEM, IDS/IPS, and core security tools.
- Conduct ongoing threat hunts using intelligence. Perform forensic analysis and provide actionable post-incident guidance.
- Embed best practices into the Software Development Life Cycle (SDLC), building automated evaluation pipelines and guardrails for secure code deployment.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 5 years of experience with security assessments or security design reviews or threat modeling.
- 5 years of experience with security engineering, computer and network security and security protocols.
- 5 years of coding experience in one or more general purpose languages.
- Must possess an active Top Secret/SCI security clearance with current polygraph.
Preferred qualifications:
- Master's degree or PhD in Computer Science, Artificial Intelligence, Cybersecurity, or a related technical field.
- Experience building, deploying, or evaluating AI-native solutions and generative AI technologies, including integrating LLMs or agentic workflows into complex operational environments.
- Demonstrated experience in offensive security, red teaming, or advanced pen testing, with a strong ability to apply an attacker's mindset to infrastructure defense and defensive engineering.
- Strong background in DevSecOps practices, including designing high-performance evaluation pipelines, building security automation, and integrating security controls directly into CI/CD workflows.
Note: Google's hybrid workplace includes remote roles.
Remote location: Maryland, USA.
This position requires onsite client-facing work in Annapolis Junction, MD, 5 days a week.
Must be a US Citizen to meet customer and compliance requirements, including potential access to classified information.