Principal Security Engineer

What you'll do

• Conduct large-scale vulnerability research, code auditing, fuzzing, and exploitability analysis for browser components.
• Provide technical guidance to engineering teams to influence product architecture and ensure secure-by-default principles.
• Identify and mitigate security risks before they reach customers through proactive threat investigations.
• Lead cross-functional incident response efforts to detect, assess, and respond to active security threats.
• Develop and oversee security analysis plans that align with long-term business objectives and product roadmaps.
• Create and implement technical solutions for automated security detection, reverse engineering, and attack disruption.
• Establish security configuration standards and best practices across the organization and the Chromium ecosystem.
• Represent the company in the broader community by publishing white papers and speaking at industry conferences.

What we're looking for

• A Bachelor's degree in Statistics, Mathematics, Computer Science, Computer Security, or a related field is required.
• A Master's degree in a relevant technical field is accepted with 4+ years of experience.
• A Doctorate in a relevant technical field is accepted with 3+ years of experience.
• Candidates must have equivalent experience to the specified degree and year combinations.
• Experience in software development lifecycle, large-scale computing, threat analysis, or modeling is required.
• Experience in cybersecurity, vulnerability research, and/or anomaly detection is required.
• Preferred experience includes vulnerability research, exploit analysis, code auditing, and secure architecture review.
• Preferred skills include fuzzer development, crash triage, and security automation using AI workflows.