← All roles

Security Engineer - Networking, Tapestry

Google X· Tapestry Security (TAPSEC) / Network Security
Apply on company site
Hybrid (Mountain View, CA; San Francisco, CA; Austin, TX; New York, NY)$174k - $255kFull-timePosted 1mo ago

About the role

Network Security Engineer role within Google's Tapestry unit, responsible for design, implementation, and operations of perimeter and cloud networks to secure inter-application connectivity in GCP environments, protect the AI-powered electric grid from external threats, and drive security policy automation and compliance.

Responsibilities

  • Design, deploy, and govern secure GCP networking architecture, including VPC Service Controls (VPC-SC) and zero default VPC configurations to ensure secure connectivity and strictly prevent the use of public endpoints.
  • Leverage GCP network security tools (Cloud Armor, VPC Service Controls, Cloud NAT, Private Service Connect) to enforce a private-only network perimeter and prevent public access to production resources.
  • Protect global grid infrastructure from multi-layer DDoS threats across OSI layers.
  • Engineer and codify security policies as Terraform code (Security as Code), ensuring firewall rules, VPC peering, and access control are automated, version-controlled, and audited.
  • Audit cloud and perimeter networks for gaps and drift, partnering with engineering teams to drive rapid vulnerability resolutions.
  • Implement boundary controls and ensure no external IPs or unauthenticated boundary paths exist across production systems.
  • Align network architecture with compliance frameworks (ISO 27001, SOC 2) and energy-specific standards (NERC CIP, FERC CEII enclaves).
  • Collaborate with AppSec, SecEng/Ops, DataSec, DevOps, and Grid Engineering to integrate network security monitoring and telemetry (VPC Flow Logs, Firewall Rules Logging, Packet Mirroring).

Qualifications

  • Bachelor's or Master’s in Computer Science, Computer Engineering, or equivalent experience.
  • 5+ years of experience in network security engineering, cloud-native security, or related infrastructure security field.
  • Deep expertise in cloud networking security, including GCP services like VPC-SC, Cloud Armor, Cloud IDS, and IAP.
  • Strong understanding of networking protocols, perimeter defenses, and DDoS mitigation across OSI layers.
  • Experience with Infrastructure-as-Code (IaC) tools, specifically Terraform.
  • Strong analytical and problem-solving skills, with a focus on securing critical software systems.
  • Excellent communication and collaboration skills for cross-functional alignment.

Skills

Required:GCP networking securityTerraformDDoS mitigation

Benefits

  • Competitive salary and equity
  • Medical, dental, and vision coverage
  • Generous PTO and flexible hybrid work model
  • 401(k) with employer contribution
  • Professional development
  • Work on important real-world problems within Alphabet-backed environment
Last updated Oct 22, 2026. Interested? Apply on the company site.
Google X logo

About Google X

Welcome to X, Alphabet's Moonshot Factory. We create radical technologies to help solve some of the world’s hardest problems.

Welcome to X, Alphabet's Moonshot Factory. We create radical technologies to help solve some of the world’s hardest problems.

technologymoonshotresearch
Company profileWebsite

More open roles at Google X