Security Analyst, gTech Risk Solutions

About the job

Security is at the core of Google's design and development process: it is built into the DNA of our products. The same is true of our offices. You're an expert who shares our seriousness about security and our commitment to confidentiality. You'll collaborate with our Facilities Management team to create innovative security strategies, investigate breaches and create risk assessment plans for the future. You believe that providing effective security doesn't come at the expense of customer service - you will be our bodyguard (and our long lost pal).

gTech Risk Solutions Engineering is executing a strategic transformation from a reactive, program-led organization to a proactive engineering powerhouse. Operating as a federated security partner to Google's central security organizations, we design and build highly contextualized security solutions tailored specifically for the gTech business ecosystem.

In this role, your mission is upfront risk prevention through technical delivery excellence, shifting the paradigm from unsustainable "risk-chasing" to "prevention by design."

Responsibilities

• Construct queries to produce robust data interpretations.
• Identify and mitigate risks to interconnected products and services.
• Participate in triaging and documenting cybersecurity incidents.
• Manage threats autonomously and recommend process enhancements.
• Understand attacker methodologies and suggest new detection mechanisms.

Qualifications

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity a related technical field or equivalent practical experience.
• 5 years of experience in security operations (SOC), incident response, threat hunting, IT compliance or equivalent.

Preferred qualifications:

• Experience with log analysis, data querying (SQL), and monitoring security controls.

• Experience coordinating cross-functional security incidents.

• Understanding of common security frameworks, access governance models, and the vulnerability management lifecycle.
• Ability to translate operational security findings into technical engineering requirements.