Senior Software Engineer, Product Security, DeepMind

Job description

Perform security evaluations and code audits across web and mobile (Android/iOS) applications on a recurring cadence, identifying flaws and driving remediation to completion. Conduct in-depth search architecture reviews, code-level security audits, and feature-level threat assessments for GDM products. Build and continuously maintain threat models for GDM web/mobile products and client-facing AI capabilities, addressing unique risks around third-party integrations, agentic features, and client-side data privacy. Develop secure-by-default client libraries, SDKs, and templates that make application security seamless for GDM product developers. Serve as an active member of the rotational security operations on-call team. Minimum Qualifications: Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or equivalent practical experience. 8 years of coding experience in general-purpose languages (e.g., JavaScript/TypeScript, Java/Kotlin, Swift, Python, Go, C++). 5 years of experience in application security engineering (web application security, mobile client security, web API security, or client-side cryptography). 5 years of experience in security operations (e.g., vulnerability management, bug bounty triage, penetration testing, red team engagement, or operational incident handling). 5 years of experience testing, and launching software products. Preferred Qualifications: Master’s degree or PhD in Computer Science, Cybersecurity, Computer Engineering, or a related technical field. Experience in a technical leadership role leading project teams and setting technical direction. Expertise in modern web and mobile OS security models. Strong background in automated scanning, static/dynamic code analysis and fuzzing. Proven track record operating in an on-call operational capacity, managing live security escalations, and collaborating with cross-functional Incident Response teams.