Job Description

Minimum qualifications:

• Bachelor’s degree in Computer Science, a related technical field, or equivalent practical experience.
• 10 years of experience in security engineering, within domains such as application security, vulnerability research, or security assessments.
• 5 years of experience in a people management role, leading and coaching software or security engineering teams.
• 5 years of experience in a technical leadership role, overseeing programs or security projects.

Preferred qualifications:

• Experience building and scaling engineering teams from the ground up, including hiring and establishing team culture.
• Familiarity with the bug bounty lifecycle, including triage, severity assessment, and researcher community management.
• Ability to manage a phased program rollout, transitioning operational ownership and scaling technical infrastructure with limited oversight.
• Ability to partner with global stakeholders to align team goals with broader organizational objectives.
• Excellent communication skills, with the ability to communicate effectively with stakeholders at all levels.

About the job

There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

You are a recognized expert in at least two security domains and use your leadership skills to manage a team that sets the direction and goals for solving Google-wide problems. You identify fundamental security problems at Google and drives major security improvements in Google infrastructure.

In this role, you will lead multiple high-impact Security teams. You will act as an organizational leader to hire and manage security and software engineers, scaling operations across consulting, assessments, vulnerability research, and remediation. You will architect AI-native automated tooling that eliminates manual toil and drives broad risk insights across Google. You will leverage your technical foundation skills in application security, including web, mobile, API, and threat modeling. You will also leverage cross-functional skills to manage complex global security issues while building organizations from the ground up.

Responsibilities

• Maintain a high level of operational initiative while collaborating closely with global leads in the US and Zurich to align on strategy and technical direction.
• Oversee the Singapore based teams responsible for discovery and elimination of security risks across Google products across all stages of the Software Development Life Cycle (SDLC).
• Guide the strategic development of agents and infrastructure to automate workloads across security consulting and assessments, vulnerability response, and remediation.