Security Engineering Manager, Enterprise Data Protection

1 Month ago • 8-11 Years • Cyber Security

Job Summary

Job Description

The Security Engineering Manager for Enterprise Data Protection will lead the technical and engineering strategy for a comprehensive data protection program. This involves identifying security issues, implementing controls, and improving security systems. Key responsibilities include defining in-scope data, labeling it, developing controls across systems, shaping program goals, leading multi-domain engineering projects, and working cross-functionally with partner teams. The role requires developing maturity models, contributing to security policies, and advocating program goals across the organization. The ideal candidate will have extensive experience in security assessments, design reviews, threat modeling, security engineering, and coding, along with team leadership experience in a technical capacity.

Must have:

8+ years security engineering experience
8+ years coding experience
3+ years team leadership
Data protection expertise
Cross-functional collaboration
Security control design & implementation

Good to have:

Data classification & DLP experience
Platform security controls expertise
Detection and response experience
Experience creating roadmaps and project scope

6 skills required

required for this role

Add these skills to join the top 1% applicants for this job

Job Details

Minimum qualifications:

Bachelor's degree or equivalent practical experience.
8 years of experience with security assessments or security design reviews or threat modeling.
8 years of experience with security engineering, computer and network security and security protocols.
8 years of coding experience in one or more general purpose languages.
3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.

Preferred qualifications:

Experience with data classification, data loss prevention, platform security controls, detection and response.
Experience working with stakeholders and partner teams to design common objectives and create blended roadmaps that ensure security objectives are met.
Ability to break down large complex technical programs to create discrete projects and short, medium and long term engineering goals.
Ability to dig into new domains and different systems to understand how they can be adapted to uphold the overarching security objectives of the program.
Excellent security engineering skills, with the ability to develop new controls across systems and environments.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

Enterprise Security Operations (ESO) enables infrastructure security operations across the enterprise globally. Centralizing all security operations brings more automation, greater efficiency and better security to the Alphabet. ESO has a portfolio of work that spans across all aspects of information security. The team drives the operational aspects of many initiatives, including driving security policy compliance at scale, leading enterprise data protection initiatives that work to proactively limit oversharing and leaks, reducing and measuring risk to Alphabet by operationalizing risk acceptance and policy exceptions, managing and administering Google Workspace for google.com, remediating Cloud policy violations, managing the access control and account life-cycle process for all user accounts at Google. ESO is a global team, with members in the San Francisco Bay Area, Los Angeles, Austin, Sydney, Hyderabad, Bengaluru.

Responsibilities

Identify security issues and implement and design security controls, tools, and services to improve security systems and processes.
Lead the technical and engineering strategy to deliver a comprehensive Enterprise Data Protection program.
Improve the protection of Alphabet's corporate data by defining what data is in scope, labeling it, then developing controls across all systems, processes, and surfaces that touch enterprise data.
Shape the goal for the program, developing workable project scope for short, medium and long term goals, defining and leading multi-domain engineering projects to support the program's requirements.
Work cross-functionally with partner teams to implement new controls within Alphabet's infrastructure, creating maturity models to measure the progress of engineering work, contributing to the development of new security policies, and advocating the program goals across the organization, including at the executive level.