Security Engineering Manager, Detection and Response

Minimum qualifications:

• 10 years of experience working in one or more of the following areas: security research, network security, intrusion detection systems, threat intelligence, threat modeling.
• Experience leading Security Engineering teams.
• Coding experience in one or more general purpose language like Python, Java, etc.

Preferred qualifications:

• Experience operating within cross-functional teams (e.g., Product, Engineering, Networks, Operations, Business Development).

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You are a recognized expert in at least two security domains and use your leadership skills to manage a team that sets the direction and goals for solving Google-wide problems. You identify fundamental security problems at Google and drives major security improvements in Google infrastructure.

The Detection Team develops and maintains the signals, tools, and infrastructure that we use, constantly evolving them to match sophisticated attackers. As part of this team, you will be conducting and leading others in security analysis, threat hunting, as well as malware and indicator analysis. We are responsible for working on all malicious activity on Google's networks. We perform deep analysis of threats on our enterprise, production, and cloud environments.

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

• Manage a team responsible for intrusion detection and incident response.
• Inspire, grow, and develop talent while providing vision and setting direction for the team, and lead effectively through outcomes rather than tasks.
• Collaborate well with partner teams in Security, Engineering, and for large-scale response.
• Help define and execute strategy for detecting malicious activity from ever-evolving adversaries.
• Conduct ongoing detailed data analysis and risk assessment, security incident analysis, and overall vision for the program.