Security Engineer, Hardware Security, Cloud CISO
Job Summary
Job Description
The Security team at Google works to create and maintain the safest operating environment. Security Engineers monitor systems for attacks and work with software engineers to fix security flaws. This role, within the Off the Shelf (OTS) Hardware Security team, focuses on securing hardware/firmware used by Cloud products. Responsibilities include identifying critical hardware/firmware devices, performing in-depth security reviews, writing threat models and reports, presenting findings to leadership, informing vendors of vulnerabilities, partnering with vendors for mitigation, advocating for design changes, and collaborating on new attack scenarios and mitigation strategies. The team works to protect Google Cloud products, ensuring the upper layers of the stack can consider hardware/firmware trustworthy.
Must have:
- Bachelor's degree in CS or related field
- 2+ years Security experience
- Reverse Engineering experience
- Hardware System Architecture knowledge
- Firmware experience
- Threat modeling and reporting
- Risk mitigation recommendations
- Vendor collaboration
Good to have:
- Hardware/firmware security experience
- Offensive and defensive security understanding
- Influence without authority
- Excellent communication and documentation
3 skills required
Job Details
Minimum qualifications:
- Bachelor's degree in Computer Science, a related field, or equivalent practical experience.
- 2 years of experience in the Security field.
- Experience in a Reverse Engineering role.
- Experience with Hardware System Architecture.
- Experience with Firmware.
Preferred qualifications:
- Experience with hardware or firmware security.
- Understanding of both offensive and defensive security methods.
- Ability to influence others without authority.
- Excellent communication and documentation skills.
About the job
Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.The Off the Shelf (OTS) Hardware Security team focuses on securing the off-the-shelf hardware/firmware used by Cloud products. We work with a wide range of other external vendors, internal teams, and industry bodies to protect devices against all hardware and firmware security threats.
OTS Hardware Security team cares deeply about protecting the hardware/firmware used by Google Cloud products so that the upper layers of the stack can consider it trustworthy.
Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.Responsibilities
- Identify business critical hardware/firmware devices within Cloud for team review. Perform in-depth and holistic hardware and firmware security review of critical business devices (e.g., Hardware Security Modules, Servers, Switches, Solid State Drives).
- Write detailed threat models and reports to support and augment reviews. Present the risk findings and risk mitigation recommendations to technical and organizational leadership across different organizations.
- Inform vendors of the hardware and firmware vulnerabilities found in their devices. Partner with vendor and internal teams in order to effectively mitigate identified risks.
- Partner with device vendors to advocate for necessary design changes to hardware and firmware. Design changes due to risk findings both internally and to the vendor.
- Collaborate with team members to come up with new attack scenarios, mitigation, vendor collaboration strategies, and to ensure consistency in team approach and methodology.
Similar Jobs
bytedance
San Jose, California, United States (On-Site)
• 2 Months ago
NVIDIA
Tel Aviv-Yafo, Tel Aviv District, Israel (On-Site)
• 3 Months ago
Get notifed when new similar jobs are uploaded
Similar Skill Jobs
bytedance
Seattle, Washington, United States (On-Site)
• 5 Days ago
black bird interactive
Vancouver, British Columbia, Canada (Hybrid)
• 3 Weeks ago
PwC
Amsterdam, North Holland, Netherlands (Hybrid)
• 5 Months ago
San Francisco, California, United States (On-Site)
• 3 Weeks ago
Get notifed when new similar jobs are uploaded
Jobs in Zürich, Zurich, Switzerland
PwC
Zürich, Zurich, Switzerland (On-Site)
• 8 Months ago
PwC
Zürich, Zurich, Switzerland (On-Site)
• 8 Months ago
Tesla
Zug, Zug, Switzerland (On-Site)
• 4 Months ago
PwC
Zürich, Zurich, Switzerland (On-Site)
• 8 Months ago
Get notifed when new similar jobs are uploaded
Cyber Security Jobs
Sydney, New South Wales, Australia (On-Site)
• 1 Month ago
Canva
Surry Hills, New South Wales, Australia (Remote)
• 1 Month ago
PwC
Dublin, County Dublin, Ireland (On-Site)
• 7 Months ago
PwC
Zürich, Zurich, Switzerland (On-Site)
• 8 Months ago
Kirkland, Washington, United States (On-Site)
• 1 Month ago
PwC
Pointe-Noire, Kouilou, Republic Of The Congo (On-Site)
• 7 Months ago
%3Aformat(webp)&w=256&q=50)
Crunchyroll
Los Angeles, California, United States (On-Site)
• 3 Months ago
Crunchyroll
San Francisco, California, United States (On-Site)
• 3 Months ago
Get notifed when new similar jobs are uploaded
