Senior Security Engineer, Operational Technology, Cloud CISO

Job description

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.<div><br></div><div>In this role, you will improve the isolation and hardening properties of Google Cloud to ensure that Google Cloud is the most secure and transparent Cloud. You will identify and resolve risks affecting the broader ICS/OT space of Google data centers, as well as other relevant infrastructure and platform security areas, supporting Google Cloud mission of being the most secure Cloud.</div>
<h3>Responsibilities</h3><ul><li>Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.</li><li>Conduct comprehensive security assessments to identify risks, vulnerabilities, and non-compliance with Google standards across infrastructure and platform layers.</li><li>Develop strategies and roadmaps to identify area of risks and to drive remediation, aligning with business objectives.</li><li>Design and implement security architectures, controls, and processes to enhance the overall security posture.</li><li>Review designs and provide security guidance to improve security of ICS/OT environments of data centers and management platforms.</li></ul>
<h3>Minimum qualifications:</h3><ul>
<li>Bachelor's degree or equivalent practical experience.</li>
<li>8 years of experience with security assessments or security design reviews or threat modeling.<br></li>
<li>8 years of experience with security engineering, computer and network security and security protocols.<br></li>
<li>8 years of coding experience in one or more general purpose languages.</li>
<li>3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.</li>
</ul><br><h3>Preferred qualifications:</h3><ul><li>Experience on industrial control systems (ICS) and operational technology (OT) security.</li><li>Experience consulting product teams on security issues throughout their entire product life-cycle.</li><li>Experience securing cloud and on-premise infrastructure (e.g., networking, virtualization) and platforms (e.g., OS hardening, containers, and orchestration).</li><li>Understanding of both offensive and defensive security methods.</li><li>Understanding of ICS/OT protocols, architectures, and devices.</li></ul>