Principal, Cyber Security and Abuse Strategy, Chrome Platform Security
- linkCopy link
- emailEmail a friend
- Health, dental, vision, life, disability insurance
- Retirement Benefits: 401(k) with company match
- Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
- Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
- Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
- Baby Bonding Leave: 18 weeks
- Holidays: 13 paid days per year
Minimum qualifications:
- Bachelor's degree in Computer Science, Engineering, Information Security, a quantitative discipline, or equivalent practical experience.
- 10 years of experience in data analytics, Trust and Safety, policy, cybersecurity, business strategy, or related fields.
- Experience leading cross-functional security, detection, or abuse-mitigation projects from problem definition to delivered controls or workflow changes.
- Experience using quantitative data analysis and operational metrics to evaluate risk exposure, measure control effectiveness, and drive executive recommendations.
Preferred qualifications:
- Master's degree in a technical field, MBA, or security certifications (e.g., CISM, CISSP)
- Experience operating as an executive individual contributor or technical risk advisor bridging security teams and executive leadership.
- Strong domain grounding across detection and response (e.g., SOC/SIEM/SOAR), application or platform security, threat modeling, incident management, and emerging AI/LLM security risks.
- Demonstrated success designing and implementing AI-enabled or automated workflows that transform manual security or trust & safety operations at scale.
- Ability to structure risk models and evaluate detection/classification tradeoffs (such as precision, recall, and false-positive impact) collaborating with engineering and data teams.
About the job
Trust and Safety has the critical responsibility of protecting Google's users by ensuring online safety and fighting fraud, malware, and abuse across Google products. We collaborate with security and anti-abuse teams across the company to address the most complex challenges facing the safety and integrity of our platforms. Within Trust and Safety Chrome Web Store and Extensions Security, we are responsible for protecting users from harmful extensions and emerging browser risks while enabling legitimate developers to deliver useful and trusted experiences across Chrome.
As Principal, Cyber Security and Abuse Strategy, you will be an executive individual contributor managing our most open-ended, multivariable abuse and security challenges across Chrome Web Store, Extensions, and the broader Chrome platform ecosystem. You will lead complex, cross-functional initiatives that evolve how we balance automated defenses, applied AI, and human judgment as both platform capabilities and threat landscapes shift.
Combining a strong foundation in cybersecurity and risk analysis with strategic influence, you will work alongside engineering analysts, security specialists, operations leads, and Product and Engineering partners to turn ambiguous, systemic risks into durable protection strategies. You will personally drive flagship risk and operational transformation projects from problem definition through implementation, translate technical and data insights into executive-level recommendations, and mentor fellow analysts to elevate strategic problem-solving across the team.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training.
US: $171000 - $247000 (USD) + 20% bonus target + equity + benefits
Learn more about benefits at Google.
Responsibilities
- Lead strategy and execution to resolve complex, ambiguous security and abuse challenges across Chrome platform ecosystem.
- Design operational guardrails balancing automation, AI workflows, and human review to proactively keep pace with evolving threats.
- Analyze quantitative threat and performance data to shape multi-quarter objective and key results (OKRs) and high-impact security priorities.
- Advise Product, Engineering, and T&S teams on emerging AI and platform risks, turning safety objectives into actionable requirements.
- Build compelling narratives that drive leadership decisions and partner with technical and operations peers to transition into an AI-first function.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.
Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.