Staff Security Engineer
Summary
Staff Security Engineer on Google's GKE (Google Kubernetes Engine) team, working to secure and harden the managed Kubernetes platform. Day to day involves Kubernetes security reviews, threat modeling, vulnerability research, and driving security strategy across engineering teams. Core tech: Kubernetes, cloud infrastructure, and security protocols.
Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.
Our missions it to make GKE the most secure managed Kubernetes platform and is ready to run all container workloads safely out of the box.
GKE, Google Kubernetes Engine, is a different kind of project in Cloud. Its core component—Kubernetes—which is also created and maintained by the team, is open source and has a vibrant community of external contributors. In this role, you will focus on security for components of our systems, such as client devices, networking equipment and server infrastructure, addressing threats from all sources. You will be working on securing and hardening the Kubernetes and GKE service using a risk based approach and strategically driving the team to achieve overall security.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training.US: $207000 - $300000 (USD) + 20% bonus target + equity + benefits
Learn more about benefits at Google.
- Lead and scale the GKE Platform Security team to proactively address emerging infrastructure risks in the rapidly shifting agentic era.
- Conduct deep-dive Kubernetes security reviews, research/reproduce vulnerabilities, and build threat models for next-generation features like the "Kubernetes for Agents" substrate.
- Establish secure operational practices and deliver concrete security guidance to engineering teams to mitigate top product threats.
- Conduct rigorous, ongoing design reviews to identify security gaps and collaborate across Google Security to build a comprehensive, long-term threat detection strategy.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 8 years of experience with security assessments or security design reviews or threat modeling.
- 8 years of experience with security engineering, computer and network security and security protocols.
- 8 years of coding experience in one or more general purpose languages.
- 2 years of experience working with Kubernetes.
Preferred qualifications:
- Experience in Cloud systems.
- Contributed to open source software.