Product Security Engineer, Device Security

Minimum qualifications:

• Bachelor's degree in a technical discipline, or equivalent practical experience.
• 3 years of experience in working with devices, system software, or hardware.
• 2 years of experience in driving security reviews, audits, or testing.

Preferred qualifications:

• Experience in driving in-depth security and/or privacy threat modeling and analysis.
• Experience in Java and/or C/C .
• Experience in Android security (e.g., OS level or application level).
• Experience with techniques for vulnerability discovery, including offensive security.
• Understanding of computer architecture, device design, security and privacy issues, and countermeasures in the system software and hardware space.
• Excellent computer security fundamentals (e.g., applied crypto, protocols, and authentication).

About the job

The Devices and Services Product Area at Google develops technically complex technologies with other organizations (Google Assistant, Google Fit, Android, etc.) and our device portfolio covers IoT devices for the home (e.g., thermostats, smart displays, smart watches, earbuds, smart lenses, VR platforms, and gaming controllers), among other product lines. Identifying and addressing security issues in these types of stack requires not only excellent technical expertise as a security engineer but also the capability to work with other teams to move forward and reduce security risk.

In this role, you will have the opportunity to become a device security subject matter expert (SME) and directly improve the design, implementation, and configurability of fundamental building blocks for our hardware, software services, and tools.

Additional Information

(Colorado only*) Minimum salary range between $120,000 - $129,000 bonus equity benefits.

*Note: Disclosure as required by sb19-085 (8-5-20) of the minimum salary compensation range for this role when being hired into our offices in Colorado.

Responsibilities

• Drive in-depth analysis of the architecture, design, and implementation of devices, including hardware and system software components.
• Conduct security and code reviews, as well as support vulnerability and incident response.
• Work with software and security engineers to define better design patterns, security best-practices, and to evaluate the robustness of products.
• Provide technical security consulting services to hardware and software teams.
• Define security requirements and influence the technical direction of product initiatives.