Google-logo
Google
ยท
Apply Now
This job has closed.

Security Engineer II, Enterprise Detection Engineering

San Jose, CA
Full-time
Onsite
$123K/yr - $174K/yr
Entry Level
Google is hiring a Security Engineer II to help protect its enterprise systems and users from human and agentic cyber threats. The role develops and improves high-fidelity detections, detection workflows, and threat modeling in collaboration with incident response, enterprise security, and engineering partners.
Apply Now

Responsibilities

  • Support peers to plan and execute threat models and scope detection requirements for enterprise surfaces, focusing on high-risk areas such as Insider Exfiltration, Access Abuse, and Malicious Process Execution
  • Support engineers to design and implement components of detection logic for systems involving multiple (2-3) interconnected components, ensuring comprehensive coverage across enterprise surfaces
  • Assess security risks and justify detection strategies based on threat intelligence and risk models. Design and implement improvements to existing detections to reduce false positives and improve detection fidelity
  • Participate in post-exercise analysis (e.g., Red Team, Purple Team) to identify detection gaps, document findings, and implement remediation detections
  • Work with peers to propose and implement incremental improvements to detection engineering pipelines, testing frameworks and automation tooling

Qualification

Required

  • Bachelor's degree or equivalent practical experience
  • 1 year of experience with security assessments or security design reviews or threat modeling
  • 1 year of coding experience in one or more general purpose languages
  • Experience with security engineering, computer and network security and security protocols

Preferred

  • Experience developing tools or automating workflows to improve security operations
  • Experience with query languages (e.g., SQL, Logica) and detection rule formats (e.g., Yara-L, YARA, Sigma)
  • Some on-job or in-classroom experience in detection engineering, security operations (SOC), threat hunting, or incident response
  • Knowledge of building and tuning detections on enterprise surfaces (macOS, Linux, Google Workspace/SaaS)
  • Knowledge of AI and agentic systems and concepts
  • Familiarity with the MITRE ATT&CK framework and threat modeling methodologies

Benefits

  • 15% bonus target
  • Equity
Google specializes in internet-related services and products, including search, advertising, and software. It is a sub-organization of Alphabet.
Glassdoor
4.4
4.4
Founded in 1998
Mountain View, California, USA
10001+ employees
https://www.google.com