ZipRecruiter

Log In

1

Google Information Security Engineer Jobs (NOW HIRING)

City Bank

Information Security Engineer

Lubbock, TX · On-site

The Information Security Engineer is responsible for the design, implementation, operation, and continuous improvement of the Bank's information security program. This role provides hands-on ...

SCF

Information Security Engineer

Anchorage, AK · On-site

Information Security Engineer Hiring Range $120,910.40 to $165,228.27 Summary of Job Responsibilities: The Southcentral Foundation (SCF) Information Security Engineer is responsible for consulting ...

Trulieve

Information Security Engineer

Tallahassee, FL · On-site

Information Security Engineer Department: Information Security Location: Remote (unless near an office) Reports to: Information Security Director or Information Security Manager FLSA Status: Exempt ...

Powers Health

Information Security Engineer

Munster, IN · On-site

$43.26 - $66.17/hr

Hybrid Reporting to the Information Security Manager, the Information Security Engineer is responsible for maintaining and implementing the cybersecurity infrastructure and program at Community ...

Trulieve

Information Security Engineer

Tallahassee, FL · On-site +1

Information Security Engineer Department: Information Security Location: Remote (unless near an office) Reports to: Information Security Director or Information Security Manager FLSA Status: Exempt ...

next page

Showing results 1-20

All JobsGoogle Information Security Engineer Jobs

Google Information Security Engineer information

See salary details

$68K

$126.8K

$191.5K

How much do google information security engineer jobs pay per year?

As of Jun 21, 2026, the average yearly pay for google information security engineer in the United States is $126,833.00, according to ZipRecruiter salary data. Most workers in this role earn between $105,000.00 and $145,000.00 per year, depending on experience, location, and employer.

Is 25 too late for cyber security?

Age is not a barrier to becoming a Google Information Security Engineer or working in cybersecurity. Many professionals start or transition into cybersecurity careers in their mid-20s or later, especially when acquiring relevant skills, certifications, such as CompTIA Security+ or CISSP, and hands-on experience. Success depends on skills, continuous learning, and practical knowledge rather than age alone.

What is the difference between Google Information Security Engineer vs Security Analyst?

AspectGoogle Information Security EngineerSecurity Analyst
Required CertificationsCertifications like CISSP, CISA, CEH often preferredCertifications like Security+, CISSP, GIAC common
Work EnvironmentDevelops security systems, implements security measures, and analyzes vulnerabilities within Google's infrastructureMonitors security alerts, investigates incidents, and manages security protocols across organizations
Employer & Industry UsagePrimarily employed by tech giants like Google, in cybersecurity and infrastructure securityEmployed across various industries, including finance, healthcare, and government, in security operations

Google Information Security Engineers focus on designing and implementing security solutions within Google's infrastructure, requiring advanced technical skills and certifications. Security Analysts primarily monitor and respond to security threats across organizations, often working in security operations centers. While both roles require security knowledge and certifications, their daily tasks and work environments differ significantly.

Can you make $500,000 a year in cyber security?

Google Information Security Engineers can potentially earn $500,000 or more annually, especially with seniority, specialized skills, and experience in high-demand areas like cloud security or threat analysis. Achieving this level often requires advanced certifications, such as CISSP or CISA, and a strong track record of managing complex security projects. Compensation varies based on location, company size, and individual expertise.

Can you make 200k a year in cyber security?

Google Information Security Engineers and other cybersecurity professionals can earn $200,000 or more annually, especially with advanced skills, certifications, and experience in areas like cloud security, penetration testing, or security architecture. Salaries vary based on location, company size, and individual expertise, with senior roles often reaching or exceeding this level.

What engineer makes $500,000 a year?

Senior security engineers, including roles like Google Information Security Engineers, can earn $500,000 or more annually, especially with experience, advanced skills, and stock options. High-level positions often require expertise in cybersecurity, cloud security, and relevant certifications such as CISSP or CISA.
More about Google Information Security Engineer jobs
What job categories do people searching Google Information Security Engineer jobs look for? The top searched job categories for Google Information Security Engineer jobs are:
Google Information Security Engineer jobs near you
Infographic showing various Google Information Security Engineer job openings in the United States as of June 2026, with employment types broken down into 93% Full Time, 6% Part Time, and 1% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $126,833 per year, or $61 per hour.
Information Security Engineer

Information Security Engineer

Ropes & Gray

Manhattan, NY • Hybrid

Other

Posted 4 days ago

Job description

About Ropes & Gray

Ropes & Gray is a preeminent global law firm. The firm has been ranked in the top three on The American Lawyer's prestigious A-List for eight consecutive years and #1 on Law.com's UK A-List twice in the past three years - rankings that honor the "best of the best" law firms. The firm has approximately 2,500 lawyers and professionals serving clients in major centers of business, finance, technology, and government in Boston, Chicago, Dublin, Hong Kong, London, Los Angeles, Milan, New York, Paris, San Francisco, Seoul, Shanghai, Silicon Valley, Singapore, Tokyo and Washington, D.C.The firm has consistently been recognized for its leading practices in many areas, including asset management, private equity, M&A, finance, real estate, tax, antitrust, life sciences, health care, intellectual property, litigation & enforcement, privacy & cybersecurity, and business restructuring. Ropes & Gray is an equal opportunity employer.

Overview

Under the direction of the Senior Manager of Information Security Engineering and Architecture, the Information Security Engineer implements, manages, and maintains the firm's information security infrastructure, empowers the firm's secure adoption of AI technologies, and responds to and investigates information security incidents to closure or escalation. The Information Security Engineer is a highly experienced, hands-on technologist with a professional foundation in network engineering, systems engineering, software development, cloud infrastructure engineering, or a related IT discipline, serving as the technical lead and subject matter expert for the implementation, administration, and maintenance for assigned information security technologies deployed by the firm. This role spans the full breadth of the firm's technology landscape, including on-premises systems, cloud-native and hybrid architectures across IaaS, SaaS, and PaaS platforms, generative AI and agentic systems, and enterprise application environments, all consistent with industry best practices, applicable standards, and regulatory requirements.

The scope of this position is firm wide and requires a thorough understanding of all IT systems the firm uses and how those systems are secured - encompassing on-premises infrastructure, multi-cloud platforms (IaaS), AI and machine learning systems, enterprise applications, and the network infrastructure that connects them.

The Information Security Engineer advises the Information Security Team on emerging vulnerabilities and newly introduced risks to firm systems - including risks introduced by the adoption of generative AI, agentic AI architectures, and the continued expansion of cloud services - and takes a proactive approach in continually assessing the security of firm systems throughout their lifecycle, providing recommendations for enhancing security and adapting to new threats and vulnerabilities.

Responsibilities

ESSENTIAL FUNCTIONS:

  • Excellent customer service skills and sense of urgency when resolving issues
  • Strong knowledge of information security principles and practices
  • Hands-on experience supporting hardware, software, and security architecture
  • Serve as the subject matter expert (SME) for information security platforms, when assigned as the primary engineer; on-going threat analysis and research
  • Play a significant role in responding to and containing information security related incidents
  • Conduct regular technical risk assessments of firm systems and infrastructure
  • Oversee and directly participate in the installation, configuration, and management of information security technologies
  • Utilize Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) tools to continuously identify and remediate misconfigurations, compliance drift, and over-privileged access across IaaS, PaaS, and SaaS environments, including container orchestration platforms, serverless architectures, and CI/CD pipeline integrations
  • Assess and mitigate security risks introduced by generative AI adoption - including prompt injection attacks, context manipulation, agentic workflow abuse, and Model Context Protocol (MCP) server vulnerabilities - and assist in the development and enforcement of organizational AI usage policies.
  • Maintain current working knowledge of generative AI concepts and architecture - including large language models (LLMs), prompt engineering, context engineering, AI skills and function-calling, agentic AI frameworks, and Model Context Protocol (MCP) servers - in order to effectively evaluate, design security controls for, and advise stakeholders on AI-integrated systems and workflows
  • Maintain expertise in the OWASP Top 10, OWASP Top-10 GenAI, CWE/CVE frameworks, and emerging application-layer attack techniques; API security testing, and web application firewall (WAF) policy management
  • Network security experience - including next-generation firewalls (NGFW), intrusion detection and prevention systems (IDS/IPS), network segmentation and microsegmentation, network traffic analysis (NTA), DNS security, IPSec VPN, and secure access service edge (SASE) architectures - to protect firm technology infrastructure
  • Assist in the development and knowledge transfer to Information Security team members, Information Services groups, and business support teams
  • Promote a culture of information security across all business units
  • Performs ticketed work-related duties
  • Flexibility to work escalated issues and/or apply production changes off-hours where needed
  • Participate in On-Call rotation for after-hours/weekend support
  • Periodic travel may be required
Qualifications

EDUCATION, EXPERIENCE AND SKILLS REQUIRED:

  • Self-directed and driven, with a proven ability to prioritize and execute independently in fast-paced environments. 
  • Bachelor of Science in Computer Science, Information Technology, Cybersecurity, or a related technical discipline; equivalent hands-on technical experience demonstrating the same depth of competency will be considered in lieu of a degree
  • Minimum 3 years of experience in dedicated information security roles, with a demonstrated track record of engineering, deploying, and operating enterprise-scale security controls and leading response to sophisticated incidents
  • 5 or more years of prior hands-on IT experience in a foundational technical discipline, such as network engineering, systems administration, software or application development, cloud infrastructure engineering, or DevOps/platform engineering
  • Working knowledge of generative AI technologies and their associated security considerations, including LLM architecture, prompt engineering and context engineering concepts, AI skills and function-calling, agentic AI frameworks, and Model Context Protocol (MCP) server security; demonstrated ability to identify and mitigate AI-introduced risks is highly desirable
  • Strong working knowledge of information security software and services, including EDR/XDR, zero trust network access (ZTNA), web security/proxy, application control, security service edge (SSE), DNS security, identity and access management (IAM/PAM), DLP, CASB, and SIEM platforms
  • Strong working knowledge of Crowdstrike Next-Gen SIEM is desirable
  • Strong knowledge of cloud security principles and architecture across all major delivery models: IaaS (AWS, Azure, GCP), SaaS (M365, NetDocs, iManage, Workday, etc.), and PaaS (container and Kubernetes security, serverless function hardening, and CI/CD pipeline security); M365 Defender and Microsoft Purview expertise is highly desirable; hands-on experience with CSPM and CNAPP tooling preferred
  • Strong working knowledge of TCP/IP and network architecture
  • Desired: Hands-on experience with network security technologies including next-generation firewalls (NGFW), IDS/IPS, network access control (NAC), network traffic analysis (NTA), microsegmentation, and SASE/SD-WAN architectures
  • Desired: Hands-on application security experience including operation of SAST, DAST, and SCA tooling, API security testing and assessment, web application firewall (WAF) administration, secure SDLC program participation, and familiarity with DevSecOps practices
  • Professional security certifications are desired but not required: CISSP, CCSP, CEH, OSCP, AWS Security Specialty, or GIAC certifications (GCIH, GPEN, GWEB, GWAPT, GCFE); active pursuit of relevant credentials is encouraged and supported by the firm
  • Strong written and oral communication skills
  • Organized, responsive and thorough problem solver
  • Ability to manage multiple concurrent activities and effectively prioritize time and effort, in a high-pressure environment
  • Ability to adapt quickly to changing priorities
  • Maintains strict confidentiality regarding sensitive firm information, personnel matters, and internal affairs, and exercises sound discretion at all times.
  • A committed team player who fosters strong working relationships, embraces the diverse expertise of colleagues, and contributes to a culture of trust, inclusion, and shared purpose.
Compensation and Total Rewards Package

Ropes & Gray is proud to offer a comprehensive Total Rewards package to our business support team members. The firm also offers comprehensive health and well-being benefits, personal and professional development, career growth opportunities and a collegial and supportive culture. The anticipated pay range for this role is listed below and represents our good faith and reasonable estimate of the starting salary range at the time of posting. In addition, this role is eligible for a discretionary bonus based on performance. The actual offered rate for this position will be determined based on job-related, non-discriminatory factors, including qualifications and experience, geographic location, education, external market data and consideration of internal equity.

  • Boston: $117,200 - $178,700
  • New York: $127,900 - $195,000
Working Conditions

Flexibility to work escalated issues off-hours and apply production changes where needed.

Periodic travel may be required.

The list of duties and responsibilities is not intended to be all-inclusive and may be expanded to include other duties or responsibilities that management may deem necessary from time to time.

Employment Type: OTHER

Apply