Staff Security Engineer, Gemini

• Strong experience in threat detection, incident response, or security engineering
• Proficiency in Python, Go, or similar languages used for automation and detection logic
• Deep familiarity with detection platforms (e.g., Splunk, EDR tools) and log pipelines including developing and deploying custom detection rules and pipelines
• Hands-on experience with containerization technologies like Docker and Kubernetes
• Comfort with CI/CD systems, infrastructure as code, and distributed systems
• Clear written and verbal communication, especially under pressure

Desirable

• The Threat Detection and Response (TDR) team builds and operates the detection pipelines, response workflows, and engineering tools that keep Gemini secure
• As a Staff Security Engineer on TDR, you will lead complex projects, own detection infrastructure, and mentor a growing team of security engineers
• This is a hands-on role that combines software engineering with deep security expertise
• You’ll work closely with partners across Security, Infrastructure, and Product to ensure we’re catching real threats without burning the team out on noise
• You’ll help us shift detection left, push logic into code, and build scalable response tooling
• We’re looking for high-velocity engineers who can lead by example, write production-grade code, and improve the signal-to-noise ratio across our detection stack
• Design, implement, and own detection logic and alerting pipelines across diverse data sources
• Lead investigations of high-severity incidents and postmortem reviews
• Build and maintain automation that enables scalable response and analysis
• Mentor engineers across the team on detection engineering, response workflows, and code quality
• Develop internal tools that help us test, tune, and improve detections
• Partner with teams across Gemini to expand coverage and context in our security data