Cloud Abuse Security Engineer

About the role

The Cloud Abuse Security Engineering (CASE) team protects Google Cloud and its users from abusive activities originating within the platform. As a Cloud Abuse Security Engineer you will research detection techniques, develop high‑fidelity detections, hunt for threats, and build tools to process abuse reports.

Key responsibilities

• Research new detection techniques to prevent outbound attacks, botnets, DDoS and other malicious behaviors that violate GCP Terms of Service.
• Develop high‑fidelity detections using raw network and host‑level telemetry.
• Proactively hunt for threats and abusers, and respond to incidents.
• Create and manage tools for collecting and processing abuse reports and threat‑intelligence data.

Required profile

• Bachelor's degree or equivalent practical experience.
• At least 2 years of experience in cloud security research, network security, intrusion detection, threat intelligence or threat detection.
• Experience with defensive security concepts, networking, core internet protocols and analyzing malicious traffic.

Required skills

• Cloud security research
• Network security
• Intrusion detection systems
• Threat intelligence and detection
• Defensive security frameworks and logging
• Core internet protocols and malicious traffic analysis
• Host/memory forensics (preferred)