Security Engineer, Access Risk Intelligence and Security Mitigation

New York, NY

Full-time

Onsite

$123K/yr - $174K/yr

Entry Level

Google is a leading technology company focused on creating and maintaining a secure operating environment for its users and developers. The Security Engineer will work with network equipment, monitor systems for attacks, and collaborate with software engineers to identify and fix security vulnerabilities.

Apply Now

Responsibilities

Drive the strategy for PRISM’s core pillars by identifying emerging access risks and designing technical solutions to mitigate them
Architect and evolve security risk mitigation systems to enable continuous, automated assessment and remediation across Google’s infrastructure
Serve as a technical consultant for security challenges, guiding teams across product areas to implement security invariants
Contribute to and lead technical execution for the Internal Access Control (INTACT) program suite, including Privilege Access Management (PAM), ModelOversight, Access-Control and Tooling (MOAT), and Infrastructure Existential Threats (IET)

Qualification

Required

Bachelor's degree or equivalent practical experience
1 year of experience with security assessments or security design reviews or threat modeling
1 year of coding experience in one or more general purpose languages
Experience with security engineering, computer and network security and security protocols

Preferred

Experience performing threat modeling for distributed systems and conducting attack path modeling and simulation to identify non-obvious lateral movement and indirect access risks
Experience building or managing security posture management frameworks that provide continuous visibility and automated governance over infrastructure risks
Knowledge of identity and access management (IAM), mandatory access control, principle of least privilege, and zero-trust architectures in production environments
Knowledge of system hardening techniques to enforce security invariants and reduce the attack surface of critical production services
Ability to use access intelligence, distilling data from internal systems to identify anomalies and prioritize high-risk remediation efforts