Drimva

Google

Director, Security Defense Platforms

San Francisco, CA, USA +1 · Director · Full-time · Posted Oct 29, 2026

Location
San Francisco, CA, USA
New York, NY, USA
Experience
15 years required, including 6 years managing managers and leading multi-site engineering organizations; 20 years preferred.
Education
Bachelor’s degree in Computer Science, Computer Engineering, Cyber security, or equivalent practical experience.

About the job

Leads the global engineering organization building and operating platforms, data pipelines, and AI-driven automation for Alphabet’s security detection and response operations.

What you'll do

  • Lead and mentor a globally distributed engineering organization and set the long-term architecture roadmap for detection and response infrastructure.
  • Build automated threat-containment capabilities and integrate AI models and agentic reasoning into security operations workflows.
  • Improve platform reliability, resilience, detection speed, and resource efficiency while delivering security risk-reduction commitments.

What they ask for

  • Bachelor’s degree in Computer Science, Computer Engineering, Cyber security, or equivalent practical experience.
  • 15 years of software engineering and technical leadership experience, including 6 years managing managers and leading multi-site engineering organizations.
  • Experience partnering with security operations, threat intelligence, or incident response teams to build developer and detection platforms.
  • Experience using modern AI/ML applications in cyber security, including automated reasoning, LLM-based agent evaluation, anomaly detection, and synthetic threat injection/watermarking.

Nice to have

  • 20 years of experience in software engineering, distributed systems, or enterprise platform infrastructure, with experience in cyber security or threat defense domains.
  • Experience architecting SOAR, SIEM, EDR data fabrics, or real-time event correlation engines.

Pay

$307000 - $427000 (USD) base salary

Tools

AI/ML, LLM, SOAR, SIEM, EDR

AI focus

Integrates AI models and agentic reasoning into operational workflows, including alert triage, incident summaries, investigations, and automated containment; requires experience with automated reasoning, LLM-based agent evaluation, anomaly detection, and synthetic threat injection/watermarking.

Model-written summary · the original posting is authoritative

First seen Oct 30, 2026 · Last verified Nov 5, 2026 (UTC)