Security Engineer, Android Product Security
for section headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections with real content. We have benefits described, pay described, responsibilities listed, qualifications (minimum and preferred). Also maybe "About The Job" could be considered "About the role". We'll include sections: About the role (the description), Responsibilities, Requirements (maybe combine minimum qualifications?), Qualifications (preferred?), Skills? Might be overlapping. The instruction: Use headings for those exact strings. We need to decide which sections to include based on content.
We have:
- About The Job: description of role, team, tasks. That's content for "About the role".
- Responsibilities: bullet list of duties.
- Minimum qualifications: list.
- Preferred qualifications: list.
We could map Minimum qualifications to "Requirements" heading, and Preferred qualifications to "Qualifications" heading. Skills maybe not separate; we could omit Skills if no specific skills list beyond qualifications. Benefits: we have benefits description. Pay: we have salary range + bonus + equity. Schedule: not mentioned; we should not include Schedule section because no content.
We must not repeat job title as heading. No Job ID etc. Remove boilerplate like EEO, accommodation, legal, etc. Also remove "Learn more about benefits at Google ." maybe that's part of responsibilities? Actually it's a line: "Learn more about benefits at Google ." That's likely a link; we should remove as boilerplate? It's not EEO but it's a generic link; maybe we can keep? The instruction: remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. "Learn more about benefits at Google ." is not exactly those but could be considered navigation? It's a link to benefits page; maybe we can keep as part of responsibilities? It's a sentence after responsibilities heading? Actually it's placed before Responsibilities: "Learn more about benefits at Google ." It's likely a placeholder; we can drop it.
We need to preserve all substantive information. So we need to include benefits details exactly as given.
Let's extract benefits paragraph:
"In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include: Health, dental, vision, life, disability insuranceRetirement Benefits: 401(k) with company matchPaid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employmentSick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeksBaby Bonding Leave: 18 weeksHolidays: 13 paid days per year Note: By applying to this position you will have an opportunity to share your preferred working location from the following: New York, NY, USA; Kirkland, WA, USA."
We need to format as prose or list? Benefits are a list; we should use - for any list of duties/requirements/benefits. So we should make a
with each benefit as - . However the benefits string is concatenated without punctuation. We need to parse into items: Health, dental, vision, life, disability insurance; Retirement Benefits: 401(k) with company match; Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment; Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance; Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks; Baby Bonding Leave: 18 weeks; Holidays: 13 paid days per year; Note: By applying to this position you will have an opportunity to share your preferred working location from the following: New York, NY, USA; Kirkland, WA, USA.
The note about location maybe not a benefit but location preference; still part of benefits paragraph. We'll include as a list item.
We need to preserve all substantive information, so include that note.
Now Pay: "Individual pay is determined by factors including job-related skills, experience, and relevant education or training. US: $147000 - $210000 (USD) + 15% bonus target + equity + benefits". We'll put under
Pay
and maybe a with that text.
Responsibilities: list items:
- Build cross-functional AI and Large Language Model (LLM) tooling to scale advanced vulnerability research, defensive engineering, and mitigation strategies across the organization.
- Participate in the Android and Device VRP program in analyzing and triaging incoming Vulnerabilities, working with cross-functional teams for vulnerability management and tool building, while proactively incorporating AI/LLMs into our VRP pipeline to improve efficiency.
- Conduct deep-dive security research into Android vulnerabilities and threat vectors, converting VRP reports into prioritized platform mitigation solutions and partner with Product/Feature teams to land them.
- Embed security by design through providing expert product security consultation and conducting comprehensive security design reviews for new Android features.
We'll put under
Responsibilities
with - .
Requirements (minimum qualifications): list:
- Bachelor's degree or equivalent practical experience.
- 2 years of experience with security assessments, penetration testing, or vulnerability research on the Android platform or Android applications.
- 2 years of experience with security engineering, computer and network security and security protocols.
- 2 years of coding experience in one or more general purpose languages.
We'll put under
Requirements
with - .
Qualifications (preferred qualifications): list:
- Experience designing and building LLM-based agentic workflows, frameworks, or automation tools specifically targeted at vulnerability research and remediation.
- Direct experience participating in, triaging, or receiving rewards from high-impact Vulnerability Reward Programs (VRPs).
- Experience in Android platform security research, as demonstrated by public CVEs, published whitepapers, or presentations at reputable security conferences (e.g., DEF CON, etc.).
- Familiarity with Artificial Intelligence (AI) and Large Language Model (LLM) concepts, with a demonstrated interest in applying them to security domains.
- Foundational understanding of the Android operating system architecture, security model, and common attack surfaces.
We'll put under
Qualifications
with - .
About the role: we have the paragraph(s) from "About The Job". We'll combine into a
maybe multiple paragraphs but we can put as one
with the text.
We need to avoid repeating job title as heading. Not needed.
We must not include Schedule section.
We must not include Skills section unless we have specific skills list; we have qualifications covering skills; we can omit Skills.
Now ensure we don't include boilerplate: EEO statements, accommodation, legal, etc. Remove those lines.
Also remove duplicated lines: none.
Now produce HTML fragment:
About the role
In this role, you will join the Android Product Security Engineering (APSE) a cross-functional team tasked with ensuring Android is the most secure and defended operating system in the world, protecting the entire ecosystem of three billion devices. You will achieve this by collaborating with internal partners across Android Security, Development, and Partner Engineering, as well as stakeholders outside of Android such as Chrome, and engage with a vast network of external partners, including SoC manufacturers and telecom carriers. You will secure this ecosystem by leading the industry-defining Android Vulnerability Reward Program (VRP) and pioneering AI-driven security engineering projects to drive advanced vulnerability research and mitigation at scale. As a Security Engineer, you will play a pivotal role in enhancing the Android ecosystem's security posture, focusing heavily on driving AI-powered security innovation alongside operational vulnerability response. In this role, you will build AI/LLM-driven Security Engineering projects, rather than just streamlining existing pipelines, build and deploy cross-functional AI tooling designed to proactively scale in-depth Android vulnerability research and automate complex mitigation strategies, as these tools require deep domain expertise to build effectively, the engineer is expected to have a strong, foundational understanding of Android threat vectors and attack surfaces. You will actively participate in the Android Vulnerability Reward Program (VRP) by participating in the triage rotations and engaging with the external researcher community. You will apply platform expertise to conduct comprehensive security research, respond to vulnerabilities in both pre-release and in-market Android products, and partner directly with feature teams to implement robust mitigation solutions.
Responsibilities
- Build cross-functional AI and Large Language Model (LLM) tooling to scale advanced vulnerability research, defensive engineering, and mitigation strategies across the organization.
- Participate in the Android and Device VRP program in analyzing and triaging incoming Vulnerabilities, working with cross-functional teams for vulnerability management and tool building, while proactively incorporating AI/LLMs into our VRP pipeline to improve efficiency.
- Conduct deep-dive security research into Android vulnerabilities and threat vectors, converting VRP reports into prioritized platform mitigation solutions and partner with Product/Feature teams to land them.
- Embed security by design through providing expert product security consultation and conducting comprehensive security design reviews for new Android features.
Requirements
- Bachelor's degree or equivalent practical experience.
- 2 years of experience with security assessments, penetration testing, or vulnerability research on the Android platform or Android applications.
- 2 years of experience with security engineering, computer and network security and security protocols.
- 2 years of coding experience in one or more general purpose languages.
Qualifications
- Experience designing and building LLM-based agentic workflows, frameworks, or automation tools specifically targeted at vulnerability research and remediation.
- Direct experience participating in, triaging, or receiving rewards from high-impact Vulnerability Reward Programs (VRPs).
- Experience in Android platform security research, as demonstrated by public CVEs, published whitepapers, or presentations at reputable security conferences (e.g., DEF CON, etc.).
- Familiarity with Artificial Intelligence (AI) and Large Language Model (LLM) concepts, with a demonstrated interest in applying them to security domains.
- Foundational understanding of the Android operating system architecture, security model, and common attack surfaces.
Benefits
- Health, dental, vision, life, disability insurance
- Retirement Benefits: 401(k) with company match
- Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
- Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
- Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
- Baby Bonding Leave: 18 weeks
- Holidays: 13 paid days per year
- Note: By applying to this position you will have an opportunity to share your preferred working location from the following: New York, NY, USA; Kirkland, WA, USA.
Pay
Individual pay is determined by factors including job-related skills, experience, and relevant education or training. US: $147000
- with each benefit as
- . However the benefits string is concatenated without punctuation. We need to parse into items: Health, dental, vision, life, disability insurance; Retirement Benefits: 401(k) with company match; Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment; Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance; Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks; Baby Bonding Leave: 18 weeks; Holidays: 13 paid days per year; Note: By applying to this position you will have an opportunity to share your preferred working location from the following: New York, NY, USA; Kirkland, WA, USA.
The note about location maybe not a benefit but location preference; still part of benefits paragraph. We'll include as a list item.
We need to preserve all substantive information, so include that note.
Now Pay: "Individual pay is determined by factors including job-related skills, experience, and relevant education or training. US: $147000 - $210000 (USD) + 15% bonus target + equity + benefits". We'll put under
Pay
and maybe awith that text. Responsibilities: list items: - Build cross-functional AI and Large Language Model (LLM) tooling to scale advanced vulnerability research, defensive engineering, and mitigation strategies across the organization. - Participate in the Android and Device VRP program in analyzing and triaging incoming Vulnerabilities, working with cross-functional teams for vulnerability management and tool building, while proactively incorporating AI/LLMs into our VRP pipeline to improve efficiency. - Conduct deep-dive security research into Android vulnerabilities and threat vectors, converting VRP reports into prioritized platform mitigation solutions and partner with Product/Feature teams to land them. - Embed security by design through providing expert product security consultation and conducting comprehensive security design reviews for new Android features. We'll put under
Responsibilities
with- .
Requirements (minimum qualifications): list:
- Bachelor's degree or equivalent practical experience.
- 2 years of experience with security assessments, penetration testing, or vulnerability research on the Android platform or Android applications.
- 2 years of experience with security engineering, computer and network security and security protocols.
- 2 years of coding experience in one or more general purpose languages.
We'll put under
Requirements
with- .
Qualifications (preferred qualifications): list:
- Experience designing and building LLM-based agentic workflows, frameworks, or automation tools specifically targeted at vulnerability research and remediation.
- Direct experience participating in, triaging, or receiving rewards from high-impact Vulnerability Reward Programs (VRPs).
- Experience in Android platform security research, as demonstrated by public CVEs, published whitepapers, or presentations at reputable security conferences (e.g., DEF CON, etc.).
- Familiarity with Artificial Intelligence (AI) and Large Language Model (LLM) concepts, with a demonstrated interest in applying them to security domains.
- Foundational understanding of the Android operating system architecture, security model, and common attack surfaces.
We'll put under
Qualifications
with- .
About the role: we have the paragraph(s) from "About The Job". We'll combine into a
maybe multiple paragraphs but we can put as one
with the text. We need to avoid repeating job title as heading. Not needed. We must not include Schedule section. We must not include Skills section unless we have specific skills list; we have qualifications covering skills; we can omit Skills. Now ensure we don't include boilerplate: EEO statements, accommodation, legal, etc. Remove those lines. Also remove duplicated lines: none. Now produce HTML fragment:
About the role
In this role, you will join the Android Product Security Engineering (APSE) a cross-functional team tasked with ensuring Android is the most secure and defended operating system in the world, protecting the entire ecosystem of three billion devices. You will achieve this by collaborating with internal partners across Android Security, Development, and Partner Engineering, as well as stakeholders outside of Android such as Chrome, and engage with a vast network of external partners, including SoC manufacturers and telecom carriers. You will secure this ecosystem by leading the industry-defining Android Vulnerability Reward Program (VRP) and pioneering AI-driven security engineering projects to drive advanced vulnerability research and mitigation at scale. As a Security Engineer, you will play a pivotal role in enhancing the Android ecosystem's security posture, focusing heavily on driving AI-powered security innovation alongside operational vulnerability response. In this role, you will build AI/LLM-driven Security Engineering projects, rather than just streamlining existing pipelines, build and deploy cross-functional AI tooling designed to proactively scale in-depth Android vulnerability research and automate complex mitigation strategies, as these tools require deep domain expertise to build effectively, the engineer is expected to have a strong, foundational understanding of Android threat vectors and attack surfaces. You will actively participate in the Android Vulnerability Reward Program (VRP) by participating in the triage rotations and engaging with the external researcher community. You will apply platform expertise to conduct comprehensive security research, respond to vulnerabilities in both pre-release and in-market Android products, and partner directly with feature teams to implement robust mitigation solutions.
Responsibilities
- Build cross-functional AI and Large Language Model (LLM) tooling to scale advanced vulnerability research, defensive engineering, and mitigation strategies across the organization.
- Participate in the Android and Device VRP program in analyzing and triaging incoming Vulnerabilities, working with cross-functional teams for vulnerability management and tool building, while proactively incorporating AI/LLMs into our VRP pipeline to improve efficiency.
- Conduct deep-dive security research into Android vulnerabilities and threat vectors, converting VRP reports into prioritized platform mitigation solutions and partner with Product/Feature teams to land them.
- Embed security by design through providing expert product security consultation and conducting comprehensive security design reviews for new Android features.
Requirements
- Bachelor's degree or equivalent practical experience.
- 2 years of experience with security assessments, penetration testing, or vulnerability research on the Android platform or Android applications.
- 2 years of experience with security engineering, computer and network security and security protocols.
- 2 years of coding experience in one or more general purpose languages.
Qualifications
- Experience designing and building LLM-based agentic workflows, frameworks, or automation tools specifically targeted at vulnerability research and remediation.
- Direct experience participating in, triaging, or receiving rewards from high-impact Vulnerability Reward Programs (VRPs).
- Experience in Android platform security research, as demonstrated by public CVEs, published whitepapers, or presentations at reputable security conferences (e.g., DEF CON, etc.).
- Familiarity with Artificial Intelligence (AI) and Large Language Model (LLM) concepts, with a demonstrated interest in applying them to security domains.
- Foundational understanding of the Android operating system architecture, security model, and common attack surfaces.
Benefits
- Health, dental, vision, life, disability insurance
- Retirement Benefits: 401(k) with company match
- Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
- Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
- Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
- Baby Bonding Leave: 18 weeks
- Holidays: 13 paid days per year
- Note: By applying to this position you will have an opportunity to share your preferred working location from the following: New York, NY, USA; Kirkland, WA, USA.
Pay
Individual pay is determined by factors including job-related skills, experience, and relevant education or training. US: $147000
- .
About the role: we have the paragraph(s) from "About The Job". We'll combine into a
- .
Qualifications (preferred qualifications): list:
- Experience designing and building LLM-based agentic workflows, frameworks, or automation tools specifically targeted at vulnerability research and remediation.
- Direct experience participating in, triaging, or receiving rewards from high-impact Vulnerability Reward Programs (VRPs).
- Experience in Android platform security research, as demonstrated by public CVEs, published whitepapers, or presentations at reputable security conferences (e.g., DEF CON, etc.).
- Familiarity with Artificial Intelligence (AI) and Large Language Model (LLM) concepts, with a demonstrated interest in applying them to security domains.
- Foundational understanding of the Android operating system architecture, security model, and common attack surfaces.
We'll put under
- .
Requirements (minimum qualifications): list:
- Bachelor's degree or equivalent practical experience.
- 2 years of experience with security assessments, penetration testing, or vulnerability research on the Android platform or Android applications.
- 2 years of experience with security engineering, computer and network security and security protocols.
- 2 years of coding experience in one or more general purpose languages.
We'll put under