> Markdown version of [/jobs/ext/2181451-senior-information-security-engineer-cloud-ciso-vulnerability-rewards-program](https://www.wearedevelopers.com/jobs/ext/2181451-senior-information-security-engineer-cloud-ciso-vulnerability-rewards-program). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Information Security Engineer, Cloud CISO, Vulnerability Rewards Program

- **Company:** Google LLC
- **Location:** Sunnyvale, CA, United States
- **Experience:** Expert
- **Salary:** $174,000.0 - $252,000.0
- **Contract:** Permanent contract
- **Skills:** Cloud Computing, Cloud Computing Security, Code Review, Cyber Security, Computer Programming, Digital Forensics, Networking Hardware, Cloud Services, Software Engineering, Google Cloud, Information Technology, Data Analytics, Service Stack, Vulnerability Analysis
- **Published:** August 22, 2026
- **Apply:** https://dejobs.org/x/x/632879A8C1A34D5F83E7C325E38A45DC/job/

## About the Role

Experience driving progress, solving problems, and mentoring more junior team members; deeper expertise and applied knowledge within relevant area., * Bachelor's degree or equivalent practical experience.

 * 5 years of experience with security engineering, computer and network security and security protocols.
 * 5 years of experience with security assessments, security design reviews, or threat modeling.
 * 5 years of coding experience in one or more general purpose languages.
 * 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Preferred qualifications:

 * 8 years of experience with vulnerability identification, assessment, and management.
 * Technical background with experience in security operations, systems administration, digital forensics, security engineering, vulnerability assessments, etc.
 * Ability to demonstrate composure and level-headedness during security escalations and lead teams towards timely resolution.
 * Leadership of various teams through ambiguous situations with influence without authority.
 * Demonstration of strong writing skills, and an ability to present to various types of audiences both external and internal.
 * Exceptional communication skills with a proven ability to articulate complex risks to stakeholders at all levels using a data-driven.

## Description

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.

Google Cloud Security Engineering within the Cloud CISO organization is responsible for ensuring every product Cloud ships securely and for increasing the assurance levels of security in the infrastructure underlying all our products. As an Information Security Engineer, you will help design and implement software and systems to the highest security standards. You will work with external security researchers from the Google Cloud Vulnerability Rewards Program (Cloud VRP) and perform technical security assessments, code reviews and vulnerability testing to highlight risk, helping Google teams and partners to improve security, and work on a wide variety of Cloud products, software designs, and technology stacks.

Google Cloud accelerates every organization's ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google's cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $174000 - $252000 (USD) + 15% bonus target + equity + benefits

Learn more aboutbenefits at Google (https://www.google.com/about/careers/applications/benefits/) .

Responsibilities

 * Conduct security assessments of Cloud security and vulnerability reports to assess risk and impact and ensure prompt and proper mitigations with key stakeholders.
 * Manage multiple cross-functional efforts and escalations simultaneously with engaged priorities. Solve complex technical problems that involve independent but interconnected components.
 * Serve as the go-to person for broad security domains and understand the interplay of threats between systems and services. Build and maintain strong relationships with stakeholders across Google, including legal, engineering, and communications teams.
 * Investigate impact to Google Cloud and its customers to determine if new detection or compromise notifications are necessary.
 * Demonstrate consistent ability to drive positive change in alignment with business objectives, and collaborate with teams to uplift overarching security capabilities. Demonstrate exceptional judgment in balancing security and business needs in owned areas, considering both risk and impact.


## Related Videos

- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data)
- [Introducing a Digital Service Catalog for speed and scale](https://www.wearedevelopers.com/videos/763-introducing-a-digital-service-catalog-for-speed-and-scale)
- [A Computer Is All You Need](https://www.wearedevelopers.com/videos/100142-a-computer-is-all-you-need)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Build a CI/CD pipeline to automate code reviews and ensure code quality](https://www.wearedevelopers.com/videos/349-build-a-ci-cd-pipeline-to-automate-code-reviews-and-ensure-code-quality)

## Related Articles

- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)