About the job

Our team investigates aggregated signals and protects the sensitive data Google holds by ensuring it is accessed appropriately. We work closely with the Detection and Response teams, Threat Analysis Group (TAG) and other partner teams to determine the validity and severity of issues.

The Detection Team develops and maintains the signals, tools, and infrastructure that we use, constantly evolving them to match sophisticated attackers.

As part of this team, you will be conducting security analysis, threat hunting, as well as malware and indicator analysis. We are responsible for handling all malicious activity on Google's networks. We perform deep analysis of threats on our enterprise, production, and cloud environments.
The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

Responsibilities

• Analyze, investigate and respond to security alerts

• Research new hunt techniques to identify/discover security threats

• Automate workflows and develop appropriate tooling to reduce toil

• Ensure compliance with legal mandates and internal Security and Privacy policies

• Lead response efforts to low severity incidents.

Minimum qualifications

• Bachelor's degree or equivalent practical experience

• 1 year of experience in analyzing cyber threats.

• Experience in security analysis, intrusion detection, SQL, malware detection, log analysis.

Preferred qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.

• 2 years of experience in security operations or assurance.