Senior Software Engineer, AI-Empowered Security, Cloud CISO

Job description

Architect and scale robust, secure platforms that automate security checks across Google Cloud’s developer pipeline and production systems. Design, optimize, and evaluate AI-driven security capabilities, leading the identification of AI opportunities across CCSE; including coding. Establish engineering and security standards for large-scale distributed systems, ensuring robust end-to-end security. Analyze and distill complex technical and security data to drive key organizational decisions and roadmap prioritization. Provide technical leadership for multiple teams, vet system designs, and mentor executive engineers to help them grow into technical leaders. Minimum Qualifications: Bachelor's degree or equivalent practical experience. 5 years of experience programming in Python or C++. 3 years of experience testing, maintaining, or launching software products, and 1 year of experience with software design and architecture. 2 years of experience in security engineering, with a focus on infrastructure security, secure software development lifecycle (SDLC), threat modeling, or automated vulnerability discovery. 1 year of experience with AI/ML infrastructure (e.g., model deployment, model evaluation, optimization, data processing, debugging). Experience with designing and evaluating AI-assisted tools or automation workflows to drive engineering efficiency. Preferred Qualifications: Master's degree or PhD in Computer Science or related technical field. 5 years of experience with data structures and algorithms. 1 year of experience in a technical leadership role. Experience designing, optimizing, or evaluating Generative AI solutions, LLM-based applications, or multi-agent orchestration systems. Experience synthesizing large-scale telemetry, security data, or system logs to identify systemic gaps and drive organizational objectives. Proficiency in the security assessment and design of global-scale distributed systems, with experience implementing end-to-end security controls (e.g., secure SDLC, automated vulnerability discovery, or threat analysis).