job description
Join Google as a Staff Software Engineer in Information Security Engineering and lead the transformation of software supply chain security in a dynamic, remote-friendly environment. Based in Bali, you'll collaborate with global teams to design and implement cutting-edge security solutions that protect Google's infrastructure and users worldwide.
This role offers the unique opportunity to work at the intersection of software engineering and cybersecurity, driving innovation in secure development practices, threat modeling, and vulnerability management. You'll mentor engineers, influence security strategies, and contribute to open-source security initiatives while enjoying Bali's vibrant tech community and work-life balance.
Google is committed to fostering an inclusive workplace where diverse perspectives thrive. We offer world-class benefits, professional development opportunities, and the flexibility to work from Bali's most inspiring locations.
Responsibility
- Lead the design and implementation of secure software supply chain solutions across Google's products and infrastructure.
- Develop and enforce security best practices for software development, deployment, and maintenance.
- Conduct threat modeling and risk assessments for critical systems and applications.
- Collaborate with cross-functional teams to integrate security into the SDLC and DevOps pipelines.
- Mentor junior engineers and drive security awareness across the organization.
- Research emerging security threats and vulnerabilities, proposing innovative mitigation strategies.
- Contribute to open-source security projects and industry standards.
- Automate security testing and monitoring to improve detection and response capabilities.
Qualifications
- Bachelor's or Master's degree in Computer Science, Information Security, or related field.
- 8+ years of experience in software engineering with a focus on security.
- Expertise in secure coding practices, cryptography, and vulnerability management.
- Experience with security tools (SAST, DAST, SCA) and frameworks (OWASP, NIST).
- Strong programming skills in languages like Python, Go, Java, or C++.
- Familiarity with cloud security (GCP, AWS, Azure) and containerization (Docker, Kubernetes).
- Excellent communication skills to articulate complex security concepts to technical and non-technical stakeholders.
- Certifications such as CISSP, CSSLP, or OSCP are a plus.