Senior Software Engineer, PDEIO Security

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

The Platforms & Devices Engineering, Infrastructure & Operations (PDEIO) Security team is responsible for verifying production infrastructure and security controls to protect billions of users.

As a senior software engineer, you will be improving the supply chain security of Chrome, ChromeOS and Android. We have multiple project areas: source code trust, build integrity, infrastructure access, and third-party risk management.

Android is Google’s mobile operating system powering more than 3 billion devices worldwide. Android is about bringing computing to everyone in the world. We believe computing is a super power for good, enabling access to information, economic opportunity, productivity, connectivity between friends and family and more. We think everyone in the world should have access to the best computing has to offer. We provide the platform for original equipment manufacturers (OEMs) and developers to build compelling computing devices (smartphones, tablets, TVs, wearables, etc) that run the best apps/services for everyone in the world.

Responsibilities

• Research, design and develop software, tooling, processes and configuration to protect all parts of our supply chain against insider accounts and third-party dependency risks.
• Participate in team planning and strategy with ideas, proposals, and initiatives to strengthen supply chain security i.e. to protect source code, builds, and tools from changes, to audit critical infrastructure access.
• Perform security reviews and design engagements with a set of stakeholders from across Chrome, ChromeOS and Android.
• Develop chain-of-custody verification and autonomous agents to grow the security efforts and verify the integrity of automated code modifications.
• Build intelligent UX into our access control management to prevent and mitigate misconfiguration.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience with software development in one or more programming languages.
• 3 years of experience testing, maintaining, or launching software products, and 1 year of experience with software design and architecture.

Preferred qualifications:

• Master's degree or PhD in Computer Science or related technical field.
• Experience in software security (e.g. assessing security risk involving technical infrastructure or distributed client software).
• Experience in software supply chain.
• Experience developing AI agents and building tooling for internal developers.
• Experience working on Android or Chromium.
• Experience with software development in Java, Golang, Python.