Staff Security Engineer, Silicon Software

Our Security team works to create and maintain the safest operating environment for Google’s users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

As a Staff Security Engineer in Google’s Silicon team, you will work in partnership with our development and product teams to ensure the security of the Tensor SoC and Pixel smartphones.

Google’s mission is to organize the world’s information and make it universally accessible and useful. Our team combines the best of Google AI, Software, and Hardware to create radically helpful experiences. We research, design, and develop new technologies and hardware to make computing faster, seamless, and more powerful. We aim to make people’s lives better through technology.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $207000 - $300000 (USD) + 20% bonus target + equity + benefits, * Conduct offensive security assessments, vulnerability research, and penetration testing across Tensor SoC firmware and software stacks.

• Perform architecture and implementation-level threat modeling, design reviews, and security audits.
• Develop automated testing tools, fuzzers, and exploits to identify and validate hardware and software vulnerabilities.
• Partner cross-functionally with hardware, software, and product teams to design mitigation strategies and drive security best practices.
• Apply system-level knowledge of software and hardware security to improve overall system security and attack resistance, proposing hardware/software mitigation strategies for vulnerabilities.

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google’sApplicant and Candidate Privacy Policy (./privacy-policy) .

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See alsoGoogle’s EEO Policy (https://www.google.com/about/careers/applications/eeo/) ,Know your rights: workplace discrimination is illegal (https://careers.google.com/jobs/dist/legal/EEOC_KnowYourRights_10_20.pdf) ,Belonging at Google (https://about.google/belonging/) , andHow we hire (https://careers.google.com/how-we-hire/) .

If you have a need that requires accommodation, please let us know by completing ourAccommodations for Applicants form (https://goo.gl/forms/aBt6Pu71i1kzpLHe2) .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.

Experience owning outcomes and decision making, solving ambiguous problems and influencing stakeholders; deep expertise in domain., * Bachelor’s degree or equivalent practical experience.

• 8 years of experience with offensive security engineering (e.g., penetration testing, threat modeling, vulnerability testing, or code-level security auditing).
• 8 years of coding experience in one or more general purpose languages (e.g., C, C++, Python, or Rust).
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
• Experience with embedded software, device drivers, kernels, or firmware., * Master’s degree or PhD in Computer Science, or a related technical field.
• Experience in reverse engineering, static analysis or dynamic analysis (Fuzzing) and exploit development.
• Experience with security reviews, penetration testing, vulnerability analysis, finding and fixing security issues, etc.
• Experience with commercial electronic devices, preferably smartphones.
• Knowledge of security engineering, computer and network security, authentication, security protocols, and applied cryptography.