Security Engineer, Detection and Response, Infrastructure Threats
GoogleJobsCloseBy Editorial Insights
Google is hiring a Security Engineer for Detection and Response focused on infrastructure threats in Zürich, full-time and onsite. You’ll join the 24/7 Detection and Response team, building detection capabilities, hunting for and investigating security events across Google’s networks and Alphabet systems, and collaborating with engineers to remediate vulnerabilities while modeling insider risk. Required: bachelor’s degree or equivalent, at least 1 year in security analysis or risk modeling or detection, experience with security analysis, and coding in a general language. Preferred: 3 years in incident response or threat hunting, Python, Go, C/C++, or Java, and experience with large data sets using SQL or custom tools. To apply, emphasize concrete detection wins, incident responses, cross-team collaboration, and readiness for an onsite Zürich role.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 1 year of experience in security analysis, risk modeling, or security detection scoped work.
- Experience with security and security analysis.
- Experience coding in one or more general purpose languages.
Preferred qualifications:
- 3 years of experience in responding to security problems in target-rich environments, looking at security alerts, forensic analysis, or incident response.
- Programming experience in Python, Go, C/C++, or Java.
- Expertise in analysis of large data sets or logs to find patterns or interesting activities (using SQL, or custom tools).
- Demonstrated expertise with threat detection development or threat hunting.
About the job
Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.
Part of Google's Detection and Response team, we monitor Google’s network and systems for threats to information security. This team builds detection to secure our production systems from insider threats, hackers, and exploits. We strive to accomplish this in the least intrusive way possible, protecting Google’s culture and innovative practices.
Responsibilities
- Build new detection capabilities to protect our Google intellectual property, business data, and user data.
- Hunt for and respond to security events on Google's networks as part of our 24/7 global operation.
- Investigate a wide variety of security events across various Alphabet systems to assess threats to Google or its customers.
- Collaborate with teams across Google to model insider risks and cultivate new data sources.
- Participate in response to large-scale security incidents.