Staff Security Engineer, Operational Technology, Cloud CISO - #52633

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of coding experience in one or more general purpose languages.
• 5 years of experience with security assessments or security design reviews or threat modeling.
• 5 years of experience with security engineering, computer and network security and security protocols.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Preferred qualifications:

• Experience on industrial control systems (ICS) and operational technology (OT) security.
• Experience consulting product teams on security issues throughout their entire product life-cycle.
• Experience securing cloud and on-premise infrastructure (e.g., networking, virtualization) and platforms (e.g., OS hardening, containers, and orchestration).
• Understanding of both offensive and defensive security methods.
• Understanding of ICS/OT protocols, architectures, and devices.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

In this role, you will improve the isolation and hardening properties of Google Cloud to ensure that Google Cloud is the most secure and transparent Cloud. You will identify and resolve risks affecting the broader ICS/OT space of Google data centers, as well as other relevant infrastructure and platform security areas, supporting Google Cloud mission of being the most secure Cloud.

Responsibilities

• Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
• Conduct comprehensive security assessments to identify risks, vulnerabilities, and non-compliance with Google standards across infrastructure and platform layers.
• Develop strategies and roadmaps to identify area of risks and to drive remediation, aligning with business objectives.
• Design and implement security architectures, controls, and processes to enhance the overall security posture.
• Review designs and provide security guidance to improve security of ICS/OT environments of data centers and management platforms.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.