Information Security Engineer, Hardware Security
- linkCopy link
- emailEmail a friend
Minimum qualifications:
- Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related field, or equivalent practical experience.
- 2 years of experience with offensive security research, with a focus on practical, real-world attacks.
- Experience in systems security, specifically finding and mitigating vulnerabilities at the intersection of hardware and software (e.g., Kernel, Hypervisor, Firmware).
Preferred qualifications:
- Experience building or using tools to discover, analyze, or reproduce hardware-level vulnerabilities.
- Understanding of Confidential Compute technologies (TEEs) and microarchitectural concepts, including speculative execution and side-channels.
- Track record of taking responsibility for technical outcomes in high-pressure security environments, such as vulnerability response or complex architectural reviews.
- History of public engagement, including published research, conference presentations, or contributions to open-source security projects.
- Ability to provide subject matter expertise to business stakeholders to help prioritize and remediate security risks based on technical impact analysis.
About the job
Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.
The industry relies on operating systems and hardware security boundaries that are not good enough. Some of these were historically believed to be secure and we have recently come to terms with what they are, and some we had no other choice at the time.
Our mission is to enable applications from Google and the world to have secure operating system and hardware privilege boundaries. We secure Google and the world by reviewing and strengthening the privilege boundaries that applications assume to be secure (e.g., virtualization layer, kernel seccomp layer, co-scheduling, process isolation). These boundaries are larger than Google so require a collaborative effort to secure.
Responsibilities
- Help responses to microarchitectural vulnerabilities by assessing their impact at Google’s scale and coordinating remediation with internal teams and external vendors.
- Contribute to architectural reviews, and improvements for Confidential CPU, GPU, and TPU environments.
- Research and develop long-term, systematic mitigations—such as robust isolation primitives—to ensure that hardware vulnerabilities never pose a significant risk to the world again.
- Partner with internal product teams to design applications that are architecturally resilient to modern hardware threats from day one.
- Collaborate deeply with hardware vendors and research institutions to share knowledge, triage impacts, and inform the design of a more secure future.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.
Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.