Security Engineer, Detection

Google seeks a Security Engineer, Detection to design and maintain high-fidelity detections and automated defenses across Google Cloud Platform and production networks.

Responsibilities

• Design, implement, and sustain precise detections across key infrastructure domains such as compute (GKE), supply chain, IAM/API (LOAS, Cloud IAM), and network.
• Collaborate with program teams to deploy agentic detection workflows that shift defenses from detect and respond to infer and interrupt at machine speed.
• Ground detection logic in verified threat data by leveraging exploit paths identified by Red teams, Orange teams, and the Vulnerability Reward Program (VRP).
• Reduce manual triage and operational burden by optimizing the feedback loops between prevention, detection, and response.
• Participate in a 24/7 global operation that hunts for and responds to security events across Google's networks, investigating a wide range of events to determine threat relevance.

Requirements

• Bachelor's degree or equivalent practical experience.
• At least 1 year of experience with security assessments, security design reviews, or threat modeling.
• At least 1 year of coding experience in one or more general purpose languages.
• Experience in security engineering, computer and network security, and security protocols.

Technologies

• GKE
• LOAS
• Cloud IAM
• Google Cloud Platform (GCP)
• AI/ML frameworks
• Prompt engineering

Benefits

• Salary: USD 123,000 - 175,000 per year
• 15% bonus target
• Equity

About the Job

• The Security team maintains the safest operating environment for Google's users and developers; Security Engineers work with network equipment and monitor systems for attacks and intrusions, while collaborating with software engineers to proactively identify and fix security flaws and vulnerabilities.
• The Detection team builds and maintains signals, tools, and infrastructure, continually evolving them to counter sophisticated attackers. This includes developing advanced detection mechanisms for attacker techniques, automating remediation, threat hunting, and conducting network and systems forensics, malware and indicator analysis.
• As a Security Engineer in Infrastructure Detection, you will secure Alphabet's backend platforms and hardware, bridging Google Cloud Platform and production networks. The goal is a self-defending, AI-driven enterprise where security is proactive and automated rather than manual and reactive.

Preferred Qualifications

• Experience responding to security problems in target-rich environments, including front-line analysis and incident response.
• Expertise in signals development, threat hunting, and threat modeling.
• Strong ability to analyze large data sets and work with intrusion detection systems.
• Knowledge of modern AI/ML frameworks and tools, including prompt engineering experience.