Software Engineer, Open Source Security

About the job

Google's software engineers develop the next-generation technologies that change how billions of users connect, explore, and interact with information and one another. Our products need to handle information at massive scale, and extend well beyond web search. We're looking for engineers who bring fresh ideas from all areas, including information retrieval, distributed computing, large-scale system design, networking and data storage, security, artificial intelligence, natural language processing, UI design and mobile; the list goes on and is growing every day. As a software engineer, you will work on a specific project critical to Google’s needs with opportunities to switch teams and projects as you and our fast-paced business grow and evolve. We need our engineers to be versatile, display leadership qualities and be enthusiastic to take on new problems across the full-stack as we continue to push technology forward.

With your technical expertise you will manage project priorities, deadlines, and deliverables. You will design, develop, test, deploy, maintain, and enhance software solutions.

Help Google securely use and produce open source software!

Open source software is now widely used not only in Google, but throughout the infrastructure of the modern world. Software supply chain attacks in open source are on the rise, and the complexity of securing software artifacts is very high. Our team's mission is to provide transparency and trust for the software supply chains of both Google and the entire software industry by developing Sigstore, easy-to-use tooling and services that provide auditable signing and verification of software artifacts. The majority of our work is open source.

The US base salary range for this full-time position is $133,000-$194,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Develop tools and services to sign and verify software artifacts.
• Improve signing transparency by implementing transparency log research.
• Design and develop integrations with securing software package repositories.
• Advocate for open source security best practices.
• Work with external partners and the open-source community.