Cloud Abuse Security Engineer

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

• Research new detection techniques to prevent and mitigate abusive activities such as outbound security attacks, botnets, DDoS, and other malicious behaviors that violate GCP’s Terms of Service.
• Develop high-fidelity detections to identify malicious activity based on raw network and host-level telemetry.
• Hunt for threats/abusers and respond proactively.
• Create, develop, and manage tools to collect and process abuse reports and threat intelligence data.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
  
• 2 years of experience working in one or more of the following areas: cloud security research, network security, intrusion detection system, threat intelligence, or threat detection.
• Experience working with defensive security concepts such as adversity tactics and techniques, frameworks, and logging.
• Experience with networking, core internet protocols, and analyzing malicious network traffic.

Preferred qualifications:

• Experience with host/memory based forensics and detections.
  
• Very strong communication and documentation skills.