Security Developer, Anti-Abuse

GoogleWaterloo, OntarioOn-siteFull-timeMid level, 2–5 yearsListed 1 hour ago

Apply now

About this role

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

As a key member of our team, you will be instrumental in building resilient, industry-leading defenses against the scale and sophistication of automated and distributed spam attacks targeting Google's ads ecosystem. This is a unique opportunity to engage in a testing and constantly evolving adversarial environment with significant impact and the satisfaction of contributing to a more trustworthy digital world.
Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

Canada: $150000 - $153000 (CAD) + 15% bonus target + equity + benefits

Learn more about benefits at Google (https://www.google.com/about/careers/applications/benefits/).

Minimum qualifications:

- Bachelor's degree or equivalent practical experience.

- 2 years of experience with security assessments or security design reviews or threat modeling.

- 2 years of experience with security developing, computer and network security and security protocols.

- 2 years of coding experience in one or more general purpose languages.

Preferred qualifications:

- Expertise in mobile platforms to identify and counter mobile-based fraud.

- Experience implementing and analyzing signal collection on user interfaces to detect fraudulent behavior.

- Experience investigating ad fraud incidents to understand attack vectors and actor methodologies.

- Experience thinking like an attacker to proactively identify and mitigate vulnerabilities in our defenses.

- Experience leveraging automation, emulation, and generative AI tools to conduct pen testing on our defenses.

- Reverse adware and malware.

- Analyze fraud behavior and attack vectors.

- Characterize traffic patterns and generate insights.

- Conduct AI-driven red-teaming experiments.

- Collaborate with software developers to build scalable and resilient defenses.