Security Engineer – Threat Intelligence

About the role

Google's Threat Intelligence Group is seeking a Security Engineer to strengthen the company's defenses against advanced persistent threats, especially government‑backed actors. You will work closely with network and software engineers to detect, analyze, and mitigate sophisticated cyber threats targeting Google products and users.

Key responsibilities

• Identify, analyze, and document network signals, malware behaviors, and threat reports related to adversary TTPs.
• Produce clear, actionable intelligence for product, security, and leadership teams.
• Own analysis of multiple threat actors and serve as a subject‑matter expert on their potential impact.
• Develop automation, proof‑of‑concept code, and tooling to improve analysis efficiency.
• Collaborate with cross‑functional stakeholders to deploy detection and mitigation solutions.

Required profile

• Bachelor's degree or equivalent practical experience.
• At least 5 years of experience in security assessments, design reviews, threat modeling, or security engineering.
• 5+ years of hands‑on coding in one or more general‑purpose languages.
• Strong communication and documentation skills.

Required skills

• Detection engineering with YARA, Snort/Suricata, and EDR rule creation.
• Proficiency in Python, C, C++ and other scripting languages.
• Reverse engineering and malware analysis.
• Deep understanding of network fundamentals, lateral movement, persistence mechanisms, covert channels, application security, authentication, and command‑and‑control techniques.