Security Engineer, Vulnerability Coordination Center

About the role

The Security team at Google creates and maintains the safest operating environment for users and developers. As a Security Engineer in the Vulnerability Coordination Center, you will monitor systems for attacks, work with software engineers to proactively identify and remediate security flaws, and coordinate vulnerability management across the company.

Key responsibilities

• Establish and mature cross‑company processes for vulnerability management, including operating models, SLAs/SLOs, discovery, reporting, and role definitions.
• Coordinate resolution of vulnerability‑related issues across internal and industry stakeholders.
• Engage with industry partners, working groups, standards bodies, and CVE issuance processes.
• Ensure compliance with legal mandates and internal security and privacy policies.
• Automate security workflows and develop tooling and processes to improve efficiency.

Required profile

• Bachelor's degree or equivalent practical experience.
• At least 2 years of experience with security assessments, design reviews, or threat modeling.
• At least 2 years of experience in security engineering, computer and network security, and security protocols.
• At least 2 years of experience coding in one or more general‑purpose programming languages.
• Preferred: CISSP or similar certification, experience analyzing and remediating security incidents, automation via scripting, and knowledge of attacker tactics, tools, and techniques.

Required skills

• Security assessments
• Threat modeling
• Security engineering
• Computer and network security
• Security protocols
• General‑purpose programming languages
• Automation scripting
• CISSP certification (preferred)