The Disruption Engineer role at Google focuses on enhancing the security of users and developers by identifying and mitigating threats from significant threat actors. The position is part of the Disruption Team within the Google Threat Intelligence Group, which aims to disrupt the operations of malicious entities targeting Google's ecosystem. Engineers in this role will collaborate with various stakeholders to analyze data and develop strategies for threat disruption. This position requires a strong background in security engineering and the ability to lead technical risk analysis efforts.

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security, and security protocols.
• 5 years of experience coding in one or more general purpose languages.
• 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

• Engage across Google Threat Intelligence Group and Alphabet to identify, vet, and refine disruption opportunities.
• Analyze data to build a comprehensive picture of threat actor infrastructure, malware, tactics, and organizational structure.
• Support disruption operations by preparing intelligence for partners and drafting abuse notifications to service providers.
• Contribute to the development and testing of detections, such as Yara rules and network signatures, to identify malicious activity.

• Employees at Google are often offered benefits like comprehensive health insurance, 401(k) matching, and flexible work arrangements, among other benefits.