Product area

The Platforms and Devices team encompasses Google's various computing software platforms across environments (desktop, mobile, applications), as well as our first party devices and services that combine the best of Google AI, software, and hardware. Teams across this area research, design, and develop new technologies to make our user's interaction with computing faster and more seamless, building innovative experiences for our users around the world.

Job description

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google's needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

Additional job description

In this role, you will have a security background to join a new team in Singapore building AI-based tooling to improve the supply chain security of Android, Chrome, and ChromeOS. You will have multiple large project areas: source code trust, build integrity, infrastructure hardening, and third-party risk management.

You would use your existing security expertise to help the team develop AI-driven tooling, for example:

• Analyzing the third-party packages usage, developing tooling to assess risk, and building automation to make version upgrades easier.
• Detecting suspicious patterns in upstream repo governance and developing risk signals.
• Developing automated pen-testing capabilities.
• Detecting gaps in chain-of-custody verification for builds.
• Developing autonomous or semi-autonomous agents to scale up our ability to protect users and address previously intractable problems.

Qualifications

Job responsibilities

• Research, design and develop AI-driven software, tooling, processes and configuration to protect all parts of the supply chain (infra, build pipelines, third-party dependencies) against compromised insider accounts and upstream dependencies.
• Participate in team planning and strategy with ideas, proposals, and initiatives to strengthen supply chain security i.e. to protect source code, builds, and tools from malicious changes, to audit critical infrastructure access, and harden systems so that no person can act alone in making production changes.
• Perform security reviews and design engagements with a broad set of stakeholders from across Android, Chrome, and ChromeOS.

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with software development in one or more programming languages, or 1 year of experience with an advanced degree.
• 2 years of experience building software for data privacy or security (e.g., identity and access management).

Preferred qualifications

• Experience in niche security for example, malware analysis, intrusion detection, and anomaly analysis.
• Experience with open-source supply chain security.
• Experience with software development in Java, Golang, Python.
• Experience developing AI agents.
• Experience working on Android or Chromium.
• Experience working with Google Cloud.