Security Engineer, Cloud Threat and Abuse Detection - Google

Job Description

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 7 years of experience working in one or more of the following areas: cloud security research, network security, intrusion detection system, threat intelligence, or threat detection.
• Experience with defensive security concepts such as adversity tactics and techniques, MITRE ATT&CK framework, logging, etc.
• Experience with networking and core internet protocols (e.g., TCP/IP, HTTP, SSL) and analyzing malicious network traffic.

Preferred qualifications:

• Experience with host/memory based forensics and detections.
• Experience with one or more general purpose coding languages.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

• Research new detection techniques to prevent/mitigate abusive activities such as outbound security attacks, botnets, DDoS, and other malicious behaviors which violate Google Cloud Platform's Terms of Service.
• Develop high fidelity detection to identify malicious activity based on raw network and host level telemetry.
• Analyze various logs and packets to increase accuracy of detections.
• Hunt for threats/abusers and respond proactively.
• Create, develop, and manage tools to collect and process abuse reports and threat intelligence data.