Staff Security Engineer, Third Party Security Diligence
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 8 years of coding experience in one or more general purpose languages (e.g., Python, C, C++, Java, Go).
- 8 years of experience with security engineering, computer and network security and security protocols.
- 5 years of experience with security leading teams in a technical capacity or leading technical risk analysis in an enterprise environment.
Preferred qualifications:
- Experience, building, deploying and reviewing automation for complex security workflows, including use of both AI-driven and traditional automation tools.
- Experience in technical leadership and knowledge of relevant enterprise security domains, particularly in threat modeling, security assessments, authentication and access controls, SaaS security, Cloud Security and data protection.
- Ability to partner with global stakeholders to align technical strategies and security initiatives with broader organizational objectives.
About the job
There's no such thing as a "safe system" - only safer systems. Our Security team works to create and maintain the safest operating environment for Google's users and developers. As a Security Engineer, you help protect network boundaries, keep computer systems and network devices hardened against attacks and provide security services to protect highly sensitive data like passwords and customer information. Security Engineers work directly with network equipment and actively monitor our systems for attacks and intrusions. You also work with software engineers to proactively identify and fix security flaws and vulnerabilities.
You use your industry experience to own and drive the resolution of complex security incidents, policy questions and technical security issues.
As a Staff Security Engineer within Alphabet’s Third-Party (3P) Risk Management program, you will be a foundational technical leader driving enterprise security initiatives, responsible for the security posture of our 3P vendors. You will move beyond traditional compliance by assessing the security posture of 3P vendors (including complex SaaS/AI tools) in collaboration with other Security teams, performing architectural reviews of critical vendors and 3P products, and building automation to expand risk assessments and risk measurement and reporting. You will partner with several Corp Eng, Compliance, Procurement and Security teams to ensure that 3P vendors meet our security standards.
The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.Responsibilities
- Establish a foundational framework for Third-Party Security Diligence (3PSD) engineering to automate and integrate security requirements seamlessly into the broader One Third Party Risk Management (TPRM) ecosystem.
- Architect AI/ML-driven automation to accelerate vendor on boarding velocity and implement a centralized data engine that provides executive-level visibility and granular risk metrics across Alphabet.
- Manage Complex Escalations, act as the primary technical lead for escalations, evaluating edge-case architectures and designing technical road maps for high-risk vendors to ensure they meet Alphabet’s security standards.
- Partner with specialized security teams (eg. Cloud, Identity, SaaS etc.) to conduct holistic reviews and engineer "Golden Path" blueprints for common high-risk third-party scenarios.
- Provide foundational technical leadership and mentorship to security engineers, driving strategic direction and high-impact risk reduction initiatives across the organisation.
Similar roles
Solutions Engineer
Johnson Controls·Singapore, Singapore
Who we are: Johnson Controls, a global leader in thermal management, mission-critical building systems, energy efficiency, and decarbonization, helps customers use energy more productively, reduce carbon emissions, and operate with the precision and resilience required in rapidly expanding industries such as data centers, healthcare, pharmaceuticals, advanced manufacturing, and higher education. For more than 140 years, Johnson Controls has delivered performance…
- Full-time
- Tech.Pass — self-sponsored, 2-yr
Information Security & IT Manager
Corto Pty Ltd·Sydney, Australia
About LawY LawY is on a mission: to help legal professionals reclaim their time with AI they actually trust and that understands them. At LawY, you're not selling generic AI: you're helping legal professionals reclaim their time and deliver better outcomes for their clients and stakeholders. Built by lawyers, we've spent two years listening, learning, and evolving our AI-native workspace.…
- Hybrid
- Full-time
- Skilled Independent 189 — PR, no sponsor
HPC Engineer
Nvidia·Singapore
NVIDIA has been transforming computer graphics, PC gaming, and accelerated computing for more than 25 years. It’s a unique legacy of innovation that’s fuelled by great technology—and amazing people. Today, we’re tapping into the unlimited potential of AI to define the next era of computing. An era in which our GPU acts as the brains of computers, robots, and self-driving…
- Full-time
- Tech.Pass — self-sponsored, 2-yr
Technical Support Engineer 2, Premier - NYC (Japanese Speaking)
Datadog·United States
We are Datadog's in-house product experts. The Technical Solutions team enables Datadog's worldwide growth by educating potential clients and ensuring that existing customers are happy and successful. Premier Support Engineers (PSEs) are primarily focused on assisting prospects and customers with any technical questions about Datadog. PSEs engage with Datadog’s Premier Customers via standard technical support channels, but are also involved…
- Full-time
Director e-Research
University of Auckland·Auckland, New Zealand
Job Description Te Whiwhinga mahi | The opportunity Lead the strategic direction of e-Research at Waipapa Taumata Rau | University of Auckland and help position the University at the forefront of digital research enablement. As Director e-Research, you will play a pivotal role in shaping the future of research infrastructure, services and capabilities that support world-class research across all disciplines.…
- Full-time
- Skilled Migrant (Residence) — PR, points-based, no single employer
Senior Network Engineer
Exegy·Belfast, United Kingdom
About Exegy Exegy is a global leader in intelligent market data, advanced trading systems, and future-proof technology. Exegy serves as a trusted partner to the complete ecosystem of the buy-side, sell-side, exchanges, and financial services technology firms around the globe. Headquartered in St. Louis with regional offices in North America, the UK/Europe and Asia Pacific, Exegy has the global footprint…
- On-site
- Full-time
Software Engineer - A26186
Activate Interactive Pte Ltd·Singapore, Singapore
Activate Interactive Pte Ltd (“Activate”) is a leading technology consultancy headquartered in Singapore with a presence in Malaysia and Indonesia. Our clients are empowered with quality, cost-effective, and impactful end-to-end application development, like mobile and web applications, and cloud technology that remove technology roadblocks and increase their business efficiency. We believe in positively impacting the lives of people around us…
- Contract
- Tech.Pass — self-sponsored, 2-yr
4486-Security Engineer II
Innovaccer Analytics·Noida, India
Engineering at Innovaccer With every line of code, we accelerate our customers' success, turning complex challenges into innovative solutions. Collaboratively, we transform each data point we gather into valuable insights for our customers. Join us and be part of a team that's turning dreams of better healthcare into reality, one line of code at a time. Together, we’re shaping the…
- Full-time
