The Staff Security Engineer role within the Cloud CISO organization focuses on enhancing the security of Google's products and infrastructure. This position involves performing security assessments, vulnerability testing, and collaborating with software engineers to identify and mitigate security flaws. The team aims to ensure that every product shipped by Cloud meets high security standards and fosters a culture of secure product development. The engineer will also engage with cross-functional teams to drive alignment on security strategies.

• Bachelor's degree or equivalent practical experience.
• 8 years of experience with security assessments or security design reviews or threat modeling.
• 8 years of experience with security engineering, computer and network security and security protocols.
• 5 years of coding experience in one or more general purpose languages.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

• Perform security reviews, research and reproduce vulnerabilities, design secure protocols and systems, and write tests and fuzzers.
• Review and develop secure operational practices, and provide security guidance for engineers and support staff.
• Review designs and look for vulnerabilities, both with one-time reviews and longer term engagements.
• Respond to vulnerabilities with repos, mitigations, and hardening.
• Focus on the security strategy for Google Cloud and scalable solutions, and the ability to influence cross-organizationally.

• Employees at Google are often offered benefits like comprehensive health insurance, 401(k) matching, and flexible work arrangements, among other benefits.