Security Engineer, Waze - Google

Minimum qualifications: + Bachelor's degree or equivalent practical experience. + 5 years of experience in security engineering, in areas related to security protocols, attack analysis, mitigation strategies, secure network design, OS hardening, or web application security. + 5 years of experience with security assessments or security design reviews or threat modeling. + 5 years of coding experience in one or more general purpose languages. + 1 year of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment. Preferred qualifications: + Experience with leading and conducting security reviews, penetration testing, vulnerability analysis, finding or fixing security issues, etc. + Experience and comfort with Cloud-native software and orchestration stacks, such as serverless architectures, Kubernetes, etc. + An understanding of threat modeling and risk-based security assessments. + Interest in both breaking (finding bugs, attacking systems, etc.) and building (engineering solutions, addressing root causes, etc.), and comfort finding the balance between those roles. + Comfort learning about and then working with a broad range of tech stacks, including Cloud-native architectures. Security is at the core of Google's design and development process: it is built into the DNA of our products. The same is true of our offices. You're an expert who shares our seriousness about security and our commitment to confidentiality. You'll collaborate with our Facilities Management team to create innovative security strategies, investigate breaches and create risk assessment plans for the future. You believe that providing effective security doesn't come at the expense of customer service - you will be our bodyguard (and our long lost pal). As a Security Engineer, you'll be responsible for defining and advocating for security best practices, including development and enforcement of technical standards, procedures, and policies. You will proactively identify and mitigate security vulnerabilities across Waze infrastructure. Waze is where people and technology meet to solve transportation challenges. It's a platform that empowers users to contribute road data and edit Waze maps to improve the way we move about the world. As the social navigation pioneer, Waze leverages mobile technology and a passionate global community to redefine expectations of today's maps. Waze is also a household name in Israel, and joining our team is an opportunity to be part of local history and be part of a passionate team and community working to change the way our cities move and make every drive smarter and safer. The US base salary range for this full-time position is $161,000-$239,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google (https://careers.google.com/benefits/) . + Contribute to incident response and vulnerability management, through activities such as vulnerability identification and triage, remediation guidance, and digital forensics. + Automate the configuration and change management of security infrastructure. + Advise developers and Site Reliability Engineer team members regarding secure development best practices. + Conduct security design and implementation reviews. Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also https://careers.google.com/eeo/ and https://careers.google.com/jobs/dist/legal/OFCCP_EEO_Post.pdf If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form: https://goo.gl/forms/aBt6Pu71i1kzpLHe2.