Staff Security Engineer, Silicon Software

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

As a Staff Security Engineer in Google's Silicon team, you will work in partnership with our development and product teams to ensure the security of the Tensor SoC and Pixel smartphones.

Google's mission is to organize the world's information and make it universally accessible and useful. Our team combines the best of Google AI, Software, and Hardware to create radically helpful experiences. We research, design, and develop new technologies and hardware to make computing faster, seamless, and more powerful. We aim to make people's lives better through technology.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $207000 - $300000 (USD) + 20% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities

• Conduct offensive security assessments, vulnerability research, and penetration testing across Tensor SoC firmware and software stacks.
• Perform architecture and implementation-level threat modeling, design reviews, and security audits.
• Develop automated testing tools, fuzzers, and exploits to identify and validate hardware and software vulnerabilities.
• Partner cross-functionally with hardware, software, and product teams to design mitigation strategies and drive security best practices.
• Apply system-level knowledge of software and hardware security to improve overall system security and attack resistance, proposing hardware/software mitigation strategies for vulnerabilities.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
  
• 8 years of experience with offensive security engineering (e.g., penetration testing, threat modeling, vulnerability testing, or code-level security auditing).
• 8 years of coding experience in one or more general purpose languages (e.g., C, C++, Python, or Rust).
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
  
• Experience with embedded software, device drivers, kernels, or firmware.

Preferred qualifications:

• Master's degree or PhD in Computer Science, or a related technical field.
• Experience in reverse engineering, static analysis or dynamic analysis (Fuzzing) and exploit development.
• Experience with security reviews, penetration testing, vulnerability analysis, finding and fixing security issues, etc.
• Experience with commercial electronic devices, preferably smartphones.
• Knowledge of security engineering, computer and network security, authentication, security protocols, and applied cryptography.

In most instances, this position requires in-person interviews as part of the hiring process.