Engineering Analyst, Trust and Safety, Chrome Extensions Security

As a Security and Applied AI Analyst for the Chrome Web Store and Extensions Security team, you will leverage your domain expertise to perform technical investigations, uncover abuse vectors and techniques, and use your combined problem-solving and strategic acumen to improve our protection protocols and evolve them into scalable, AI driven systems. You will collaborate closely with engineering and product partners to identify threats, mitigate risks, and launch new protection mechanisms to help make the Chrome platform ecosystem the safest in the world. You will deploy solutions, both algorithmic and operational which will enable Google to identify and flag abuse more easily, more effectively, and at scale.

At Google we work hard to earn our users' trust every day. Trust & Safety is Google's team of abuse fighting and user trust experts working daily to make the internet a safer place. We partner with teams across Google to deliver bold solutions in abuse areas such as malware, spam and account hijacking. A team of Analysts, Policy Specialists, Engineers, and Program Managers, we work to reduce risk and fight abuse across all of Google's products, protecting our users, advertisers, and publishers across the globe in over 40 languages.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $132000 - $190000 (USD) + 15% bonus target + equity + benefits

Learn more aboutbenefits at Google (https://www.google.com/about/careers/applications/benefits/) .

Responsibilities

• Conduct investigations to catch harmful and abusive behavior and actors, enforce our product policies, learn abuse patterns, and establish ground truth data to train automated systems.
• Reverse engineer potentially harmful extensions (written in JavaScript) to understand their operations and impact on the Chrome ecosystem.
• Design AI-powered and automated solutions that enable scalable identification of malware, spam, and other harmful extensions.
• Collaborate with other teams to develop and deploy new detection methods and signals, train and mentor a large team of security reviewers.
• Enhance operational workflows via AI integration, process improvements, and identifying automation opportunities.

Experience driving progress, solving problems, and mentoring more junior team members; deeper expertise and applied knowledge within relevant area., * Bachelor's degree or equivalent practical experience.

• 2 years of experience in building or reverse engineering JavaScript, PHP, mobile/web applications.
• Experience with quantitative and qualitative analysis, using languages like SQL and Python., * Master's degree in Computer Science, Information Technology, quantitative or quantitative discipline (e.g., Computer Science, Statistics, Mathematics, Operations Research, etc.).
• Experience in cybersecurity principles and practices.
• Experience with static and dynamic analysis of malicious binaries.
• Knowledge of one or more of the following areas: statistical analysis and machine learning libraries (e.g., R, TensorFlow), programming languages (e.g., Python), Large Language Models (LLMs) or applied AI.
• Familiarity with the development lifecycle and security considerations specific to browser extensions or similar technologies.
• Excellent problem-solving and critical thinking skills with attention to detail in an ever-changing environment.

About the job

Trust & Safety team members are tasked with identifying and taking on the biggest problems that challenge the safety and integrity of our products. They use technical know-how, excellent problem-solving skills, user insights, and proactive communication to protect users and our partners from abuse across Google products like Search, Maps, Gmail, and Google Ads. On this team, you're a big-picture thinker and strategic team-player with a passion for doing what's right. You work globally and cross-functionally with Google engineers and product managers to identify and fight abuse and fraud cases at Google speed - with urgency. And you take pride in knowing that every day you are working hard to promote trust in Google and ensuring the highest levels of user safety.

XIn accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See alsoGoogle's EEO Policy (https://www.google.com/about/careers/applications/eeo/) ,Know your rights: workplace discrimination is illegal (https://careers.google.com/jobs/dist/legal/EEOC_KnowYourRights_10_20.pdf) ,Belonging at Google (https://about.google/belonging/) , andHow we hire (https://careers.google.com/how-we-hire/) . If you have a need that requires accommodation, please let us know by completing ourAccommodations for Applicants form (https://goo.gl/forms/aBt6Pu71i1kzpLHe2) . Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting. To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.