Senior Security Engineer, Access Security

Responsibilities

• Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
• Drive the strategy for the teams core pillars by identifying emerging access risks and designing technical solutions to mitigate them at scale.
• Architect and evolve security risk mitigation systems to enable continuous, automated assessment and remediation across Google’s infrastructure.
• Serve as a technical consultant for complex security issues, guiding teams across Product Areas (PAs) to implement security invariant.
• - Identify security issues and implement and design security controls, tools, and services to improve security systems and processes. - Drive the strategy for the teams core pillars by identifying emerging access risks and designing technical solutions to mitigate them at scale. - Architect and evolve security risk mitigation systems to enable continuous, automated assessment and remediation across Google’s infrastructure. - Serve as a technical consultant for complex security issues, guiding teams across Product Areas (PAs) to implement security invariant.

Minimum qualifications:

Preferred qualifications:

Qualifications

• Minimum qualifications: - Bachelor's degree or equivalent practical experience. - 5 years of experience with security assessments or security design reviews or threat modeling. - 5 years of experience with security engineering, computer and network security and security protocols. - 5 years of coding experience in one or more general purpose languages. - 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment. Preferred qualifications: - Experience in building or managing security posture management frameworks that provide continuous visibility and automated governance over infrastructure risks. - Understanding of identity and access management (IAM), mandatory access control (MAC), principle of least privilege, and zero-trust architectures in production environments. - Technical knowledge of system hardening techniques across various layers (OS, network, and application) to enforce security invariants and reduce the attack surface of critical production services. - Proven expertise in performing complex threat modeling for large-scale distributed systems and conducting attack path modeling and simulation to identify non-obvious lateral movement and indirect access risks.