Search Security Engineering Pod

The pod will work as the operational bridge between automated security scanning/remediation systems and Google’s product code owners. The team will focus on threat modeling, vulnerability triage, exploitability validation, automated patch verification, and driving security issues through production closure.

• Threat Modeling & Asset Profiling Engineer

Experience with trust boundaries, attack surfaces, data flows, STRIDE/PASTA, and distributed or microservice architectures.

• Vulnerability Triage & Policy Engineer

Strong knowledge of CWE, CVE, OWASP Top 10, severity classification, vulnerability scoring, remediation SLAs, and scanner findings.

• Vulnerability Reproduction & PoC Validation Engineers

Hands-on coding experience in at least two languages: C++, Go, Java, or Python. Must be able to build test harnesses, mock dependencies, create PoCs, and validate vulnerabilities versus false positives.

• Automated/Agentic Remediation QA Engineer

Strong secure code-review skills, automated patch validation, unit and integration testing, regression identification, and experience reviewing AI/agent-generated code fixes.

• Security Remediation & Product Coordination Engineer

Experience coordinating with product code owners, tracking remediation SLAs, supporting code reviews and deployments, and verifying production closure.

• Candidates must be comfortable working onsite and should have strong application security, secure coding, debugging, vulnerability management, and stakeholder coordination experience.

NMK Global Inc. is a global IT Services & Solutions company specializing in IT Staffing, Technology Consulting, Workforce Solutions, and Application Development Services. We help organizations build high-performing technology teams by connecting them with exceptional talent across a wide range of industries. Our expertise, industry knowledge, and consultative approach enable clients to achieve successful business outcomes while helping professionals advance their careers.