Security Engineer, Waze
Job Description
- Experience with security reviews, penetration testing, vulnerability analysis
- Experience with Cloud-native software and orchestration stacks (Kubernetes, serverless)
- Understanding of threat modeling and risk-based security assessments
- 5+ years security engineering experience
- 5+ years security assessments/design reviews experience
- 5+ years coding experience
- 1+ year team lead experience or technical risk analysis
- Contribute to incident response and vulnerability management
- Automate security infrastructure configuration and change management
- Advise developers on secure development best practices
- Conduct security design and implementation reviews
- Bonus
- Equity
- Benefits
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 5 years of experience in security engineering, in areas related to security protocols, attack analysis, mitigation strategies, secure network design, OS hardening, or web application security.
- 5 years of experience with security assessments or security design reviews or threat modeling.
- 5 years of coding experience in one or more general purpose languages.
- 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
Preferred qualifications:
- Experience with leading and conducting security reviews, penetration testing, vulnerability analysis, finding or fixing security issues, etc.
- Experience and comfort with Cloud-native software and orchestration stacks, such as serverless architectures, Kubernetes, etc.
- An understanding of threat modeling and risk-based security assessments.
- Interest in both breaking (finding bugs, attacking systems, etc.) and building (engineering solutions, addressing root causes, etc.), and comfort finding the balance between those roles.
- Comfort learning about and then working with a broad range of tech stacks, including Cloud-native architectures.
About the job
Security is at the core of Google's design and development process: it is built into the DNA of our products. The same is true of our offices. You're an expert who shares our seriousness about security and our commitment to confidentiality. You'll collaborate with our Facilities Management team to create innovative security strategies, investigate breaches and create risk assessment plans for the future. You believe that providing effective security doesn't come at the expense of customer service - you will be our bodyguard (and our long lost pal).
As a Security Engineer, you'll be responsible for defining and advocating for security best practices, including development and enforcement of technical standards, procedures, and policies. You will proactively identify and mitigate security vulnerabilities across Waze infrastructure.
Waze is where people and technology meet to solve transportation challenges. It's a platform that empowers users to contribute road data and edit Waze maps to improve the way we move about the world. As the social navigation pioneer, Waze leverages mobile technology and a passionate global community to redefine expectations of today’s maps.
Waze is also a household name in Israel, and joining our team is an opportunity to be part of local history and be part of a passionate team and community working to change the way our cities move and make every drive smarter and safer.Responsibilities
- Contribute to incident response and vulnerability management, through activities such as vulnerability identification and triage, remediation guidance, and digital forensics.
- Automate the configuration and change management of security infrastructure.
- Advise developers and Site Reliability Engineer team members regarding secure development best practices.
- Conduct security design and implementation reviews.
