Job Details

Apply

• Bachelor's degree or equivalent practical experience.
• 8 years of experience with security assessments or security design reviews or threat modeling.
• 8 years of experience with security engineering, computer and network security and security protocols.
• 8 years of coding experience in one or more general purpose languages.
• 3 years of experience leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
• 3 years of experience in incident management.

Preferred qualifications:

• Certifications in OSCP, SANS GIAC (e.g., GSEC, GPEN, GWAPT).
• Experience with information security incident and threat assessments (incident response, penetration testing, vulnerability assessments).
• Understanding of full software stack from devices (embedded, mobile, web) to frontend serving stack, backend, video streaming systems, global networking, crypto, protocols.

About the job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

The YouTube Security engineering team builds and deploys a combination of reactive and proactive systems to manage security threats against the platform and the community. Whereas common practice in fighting abuse relies heavily on enforcement, the team is investing in innovative strategies and designs for prevention. The YouTube teams design solutions and deploy large systems that span multiple Google clusters, Google employees, creators and users. To succeed, the security team must recognize and neutralize the greatest security threats facing the platform, while promoting a culture of responsibility and the application of security best-practices throughout YouTube.

Responsibilities

• Lead the security strategy for YouTube and consult on security incidents across YouTube products.
• Review and develop secure operational practices, provide security guidance to engineers and support staff, and respond to vulnerabilities with appropriate repositories, mitigations, and hardening.
• Engage with penetration testing teams and employ techniques like reverse engineering, fuzzing, and static analysis to identify vulnerabilities.
• Review designs for security gaps, both with one-time and longer term engagements, and surface vulnerability patterns and design them out.
• Explore foundational/Large Language Models (LLM) for identifying security gaps in product areas.