Engineering Director, Product Security, Core
- linkCopy link
- emailEmail a friend
Minimum qualifications:
- Bachelor's degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience
- 15 years of experience in software engineering, with 8 years of experience in a technical engineering role
- Experience with protecting systems
- Experience in vulnerability management, posture management, or risk analysis
Preferred qualifications:
- Master's degree in Electrical Engineering, Computer Engineering, or Computer Science
- Experience motivating others to act by creating a shared sense of outlook or purpose, creating a compelling roadmap for the future, communicating clearly, and employing a collaborative leadership approach
- Experience leading complex cross-functional engineering projects
- Experience with Agentic AI/ML systems and their unique security implications, including policy-based authorization
- Experience providing clarity and alignment across the organization on goals, outcomes, and timelines as well as encouraging engineering excellence and coaching
- Entrepreneurial and strategic mindset, growing at the intersection of technology and business with broad technical experience
About the job
As the Director of Engineering for Product Security (Safe Coding, Cryptography, and Software Supply Chain) in Privacy, Safety, and Security (PSS), you will lead a 100-person global organization across the US, Zurich, and Singapore. You will define the strategic outlook and own the infrastructure responsible for building Google’s secure-by-design development platforms and code integrity systems, ensuring our core software remains resilient at scale.
In this role, you will drive defensive security into the AI era by transitioning Google from reactive vulnerability remediation to automated, secure-by-construction systems. This involves establishing "well-lit paths"—including memory-safe languages like Rust and compiler-enforced defaults—and cryptographic policy engines. To succeed, you will navigate the complex trade-offs between strict security guardrails and developer velocity, executing a multi-year roadmap that protects users as the global developer ecosystem grows in complexity.
To be effective, you will utilize experience as an engineering executive who flexes easily between deep technical execution and high-level strategic alignment. You will be comfortable with ambiguity, possess a strong bias for action, and collaborate exceptionally well across global boundaries. Above all, you will be an advocate for developer productivity and user safety.
The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training.US: $307000 - $427000 (USD) + 30% bonus target + equity + benefits
Learn more about benefits at Google.
Responsibilities
- Lead the strategic outlook and multi-year roadmap for Google's transition to secure-by-construction defenses, ensuring our codebase and supply chain posture scale resiliently alongside AI-driven threats.
- Mentor a tiered, multi-site organization of 100 engineers, fostering a culture focused on engineering excellence and psychological safety.
- Drive the adoption of 'well-lit paths' across tech stacks, focusing on safe coding, cryptographic hygiene, and software supply chain security.
- Partner with Product Area CISOs and engineering executives across Alphabet to align on security roadmaps and drive the upstream adoption of safe-by-default developer platforms.
- Define Google's code integrity and software supply chain security strategy while leading company-wide initiatives, including Cryptographic Hygiene OKRs and legacy migrations.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.
Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.