About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Uppercase is a specialized team of security engineers dedicated to identifying and mitigating threat actors before they can achieve their mission. Originating from Alphabet's moonshot factory and developed within Chronicle (now Google Sec Ops), we leverage skills in big data, cybersecurity, machine learning, and cloud computing to engineer next-generation security solutions. Our goal is to partner with the broader security community to ensure the advantage remains with those fighting cybercrime.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

The US base salary range for this full-time position is $123,000-$174,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Conduct technical threat actor behavior analysis and perform in-depth research into emerging threat activity.

• Work with partner teams across Google to discover and implement new detection capabilities.

• Write and optimize YARA-L rules to track and identify potentially malicious behavior.

• Maintain and scale detection engineering processes and tooling as needed.

• Innovate detection engineering strategies by leveraging LLM-based technologies and AI agents.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.

• 1 year of coding experience in one or more general purpose languages.

• 1 year of experience with security assessments or security design reviews or threat modeling.

• Experience with security engineering, computer and network security, and security protocols.

Preferred qualifications

• Experience in security research, detection engineering, or adjacent work.

• Experience with signals development, threat hunting, and threat modeling on cloud data sources.

• Experience with security analysis tooling, including cloud audit logs and Security Information and Event Management (SIEM).