Director, Security Defense Platforms
San Francisco, CA, USA +1 · Director · Full-time · Posted Oct 29, 2026
- Location
- San Francisco, CA, USA
New York, NY, USA - Experience
- 15 years required, including 6 years managing managers and leading multi-site engineering organizations; 20 years preferred.
- Education
- Bachelor’s degree in Computer Science, Computer Engineering, Cyber security, or equivalent practical experience.
About the job
Leads the global engineering organization building and operating platforms, data pipelines, and AI-driven automation for Alphabet’s security detection and response operations.
What you'll do
- Lead and mentor a globally distributed engineering organization and set the long-term architecture roadmap for detection and response infrastructure.
- Build automated threat-containment capabilities and integrate AI models and agentic reasoning into security operations workflows.
- Improve platform reliability, resilience, detection speed, and resource efficiency while delivering security risk-reduction commitments.
What they ask for
- Bachelor’s degree in Computer Science, Computer Engineering, Cyber security, or equivalent practical experience.
- 15 years of software engineering and technical leadership experience, including 6 years managing managers and leading multi-site engineering organizations.
- Experience partnering with security operations, threat intelligence, or incident response teams to build developer and detection platforms.
- Experience using modern AI/ML applications in cyber security, including automated reasoning, LLM-based agent evaluation, anomaly detection, and synthetic threat injection/watermarking.
Nice to have
- 20 years of experience in software engineering, distributed systems, or enterprise platform infrastructure, with experience in cyber security or threat defense domains.
- Experience architecting SOAR, SIEM, EDR data fabrics, or real-time event correlation engines.
Pay
$307000 - $427000 (USD) base salary
Tools
AI/ML, LLM, SOAR, SIEM, EDR
AI focus
Integrates AI models and agentic reasoning into operational workflows, including alert triage, incident summaries, investigations, and automated containment; requires experience with automated reasoning, LLM-based agent evaluation, anomaly detection, and synthetic threat injection/watermarking.
Model-written summary · the original posting is authoritative