Staff Security Engineer, Security Research

About the role

Google's Security team builds tooling to scale security research, creates new methods for finding high-impact vulnerabilities, uses in-house exploit development to guide long-term defenses, and improves industry security processes. As a Staff Security Engineer, you will help protect network boundaries, harden systems against attacks and safeguard sensitive data such as passwords and customer information. The role involves working with network equipment, monitoring systems for attacks and intrusions, and collaborating with software engineers to find and fix security flaws.

Key responsibilities

• Conduct vulnerability research and exploit development, specifically in iOS, macOS and XNU.
• Work with other security engineers on the analysis of and response to vulnerabilities reported by others.
• Create tools and infrastructure that lets the team scale its research efforts.
• Publish results with the wider defensive community.
• Identify security issues and design and implement security controls, tools and services.

Required profile

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in security engineering, computer and network security and security protocols.
• 8 years of experience in security assessments, security design reviews or threat modeling.
• 8 years of coding experience in one or more general-purpose languages.
• Experience in cyber threat engineering (vulnerability research, exploit development, reverse engineering, malware analysis, threat modeling, code-level security auditing).
• Experience with the technical iOS platform.

Preferred qualifications

• Experience in one or more vulnerability research fields and publishing security research.
• Communicating technical security concepts to multiple audiences.
• Offensive security experience (Red Teaming, penetration testing, adversary simulation).
• Identifying emerging threats and vulnerabilities.

In-person interviews are usually required as part of the hiring process.