Security Engineer, Hardware Security, Cloud CISO

Requirements:

• Bachelor's degree in Computer Science, a related field, or equivalent practical experience.
• 2 years of experience in the Security field.
• Experience in a Reverse Engineering role.
• Experience with Hardware System Architecture.
• Experience with Firmware.

Nice to haves:

• Experience with hardware or firmware security.
• Understanding of both offensive and defensive security methods.
• Ability to influence others without authority.
• Excellent communication and documentation skills.

What you'll be doing:

• Identify business critical hardware/firmware devices within Cloud for team review. Perform in-depth and holistic hardware and firmware security review of critical business devices (e.g., Hardware Security Modules, Servers, Switches, Solid State Drives).
• Write detailed threat models and reports to support and augment reviews. Present the risk findings and risk mitigation recommendations to technical and organizational leadership across different organizations.
• Inform vendors of the hardware and firmware vulnerabilities found in their devices. Partner with vendor and internal teams in order to effectively mitigate identified risks.
• Partner with device vendors to advocate for necessary design changes to hardware and firmware. Design changes due to risk findings both internally and to the vendor.
• Collaborate with team members to come up with new attack scenarios, mitigation, vendor collaboration strategies, and to ensure consistency in team approach and methodology.

Perks and benefits:

• Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
• Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of various factors.
• If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
• Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
• To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.