Principal, Cyber Security and Abuse Strategy, Chrome Platform Security

Trust and Safety has the critical responsibility of protecting Google's users by ensuring online safety and fighting fraud, malware, and abuse across Google products. We collaborate with security and anti-abuse teams across the company to address the most complex challenges facing the safety and integrity of our platforms. Within Trust and Safety Chrome Web Store and Extensions Security, we are responsible for protecting users from harmful extensions and emerging browser risks while enabling legitimate developers to deliver useful and trusted experiences across Chrome.

As Principal, Cyber Security and Abuse Strategy, you will be an executive individual contributor managing our most open-ended, multivariable abuse and security challenges across Chrome Web Store, Extensions, and the broader Chrome platform ecosystem. You will lead complex, cross-functional initiatives that evolve how we balance automated defenses, applied AI, and human judgment as both platform capabilities and threat landscapes shift.

Combining a strong foundation in cybersecurity and risk analysis with strategic influence, you will work alongside engineering analysts, security specialists, operations leads, and Product and Engineering partners to turn ambiguous, systemic risks into durable protection strategies. You will personally drive flagship risk and operational transformation projects from problem definition through implementation, translate technical and data insights into executive-level recommendations, and mentor fellow analysts to elevate strategic problem-solving across the team.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $171000 - $247000 (USD) + 20% bonus target + equity + benefits

Learn more about benefits at Google (https://www.google.com/about/careers/applications/benefits/).

Minimum qualifications:

- Bachelor's degree in Computer Science, Engineering, Information Security, a quantitative discipline, or equivalent practical experience.

- 10 years of experience in data analytics, Trust and Safety, policy, cybersecurity, business strategy, or related fields.

- Experience leading cross-functional security, detection, or abuse-mitigation projects from problem definition to delivered controls or workflow changes.

- Experience using quantitative data analysis and operational metrics to evaluate risk exposure, measure control effectiveness, and drive executive recommendations.

Preferred qualifications:

- Master's degree in a technical field, MBA, or security certifications (e.g., CISM, CISSP)

- Experience operating as an executive individual contributor or technical risk advisor bridging security teams and executive leadership.

- Strong domain grounding across detection and response (e.g., SOC/SIEM/SOAR), application or platform security, threat modeling, incident management, and emerging AI/LLM security risks.

- Demonstrated success designing and implementing AI-enabled or automated workflows that transform manual security or trust & safety operations at scale.

- Ability to structure risk models and evaluate detection/classification tradeoffs (such as precision, recall, and false-positive impact) collaborating with engineering and data teams.

- Lead strategy and execution to resolve complex, ambiguous security and abuse challenges across Chrome platform ecosystem.

- Design operational guardrails balancing automation, AI workflows, and human review to proactively keep pace with evolving threats.

- Analyze quantitative threat and performance data to shape multi-quarter objective and key results (OKRs) and high-impact security priorities.

- Advise Product, Engineering, and T&S teams on emerging AI and platform risks, turning safety objectives into actionable requirements.

- Build compelling narratives that drive leadership decisions and partner with technical and operations peers to transition into an AI-first function.