Security Engineer, Data Center Platforms, Technical Infrastructure

Security Engineer, Data Center Platforms, Technical Infrastructure

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

In this role, you will work with the team to prioritize security tests for platform security properties in hardware and firmware. You will architect, scope, and develop tests interacting with various hardware/software architectures and tooling. You will perform security reviews of different platforms and components that are going to be deployed in Google data centers. You will develop threat models, security requirements, and investigate security properties in hardware and firmware. You will assess security of low-level firmware and interact with different development teams in different time zones to drive security improvements.

Google Cloud accelerates every organization's ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google's cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

Responsibilities:

• Architect and implement automated security test infrastructure and specific tests to ensure correct and sufficient implementation of security controls for hardware platforms.
• Define automated security testing criteria to maintain security controls for hardware deployed in Google's data centers.
• Deliver security reviews of hardware/firmware components.
• Develop the threat models, risk assessments, and define security requirements for hardware products entering Google's data centers.
• Design and engineer the necessary security controls for identified threats and risks.