Software Engineer, Security Automated Vulnerability Management

Minimum qualifications:

• Bachelor’s degree or equivalent practical experience.
• 2 years of experience with software development in one or more programming languages, or 1 year of experience with an advanced degree in an industry setting.
• 2 years of experience with data structures or algorithms in either an academic or industry setting.
• 2 years of experience building software for data privacy or security (e.g., identity and access management).
• 2 years of experience with network security.

Preferred qualifications:

• Master's degree or PhD in Computer Science or related technical field.
• Experience in code and system health, diagnosis and resolution, and software test engineering.
• Experience in analyzing systems and identifying security problems, threat modeling, vulnerability management, and remediation.
• Experience in designing and implementing security features.
• knowledge of one or more of the following: software services, authentication protocols, network security.
• Ability to execute and finish tasks towards a larger goal with minimal assistance from more executive team members.

About the job:

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.

The US base salary range for this full-time position is $141,000-$202,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities:

• Research new environments (e.g., containers) and identify new attack vectors that need to be covered by automated scanning and that may pose a significant security risk to Alphabet.
• Combine risk-based vulnerability management assessments and technical solutions for vulnerability mitigation with the production of metrics and insights to track the health of vulnerability management strategies and programs.
• Analyze, design, and deploy the next generation of security scanning and analysis automation.
• Enable compliance support through security actions in engineering.
• Requires comfort writing, testing, and deploying code in Java.