Security Analyst - Threat Intelligence Operations

Overview

This role is part of Google's newly formed Threat Intelligence Operations (TIO) team, dedicated to tailoring threat intelligence specifically for Alphabet. The position focuses on delivering actionable insights to identify defensive coverage gaps and improve the organization's security posture.

About the Team

The Core team underpins Google's key products by owning foundational design elements, developer platforms, product parts, and infrastructure. They create central solutions and strengthen systems across Google’s portfolio, enabling secure, innovative user and developer experiences.

Key Responsibilities

• Integrate publicly available threat reports with internal security data from threat scenarios and enterprise security intelligence sources.
• Assess known threats in relation to existing defensive measures to uncover gaps, including reviewing code to evaluate technical defenses and detection strategies.
• Perform targeted manual threat hunts to validate and ground intelligence in real-world operational contexts.
• Generate comprehensive threat assessments to ensure scenarios are incorporated into threat catalogues and engineering development plans.

Minimum Qualifications

• Bachelor's degree or equivalent practical experience.
• At least 2 years in cybersecurity, threat intelligence, or threat analysis roles.
• Hands-on experience in aggregating intelligence, identifying threat coverage gaps, or conducting threat modeling.
• Proficiency with automation through scripting or programming and data querying using SQL to aid threat hunting and intelligence collection.
• Fluency in English for effective communication and cross-team collaboration, including publishing high-quality advisories.

Preferred Qualifications

• Experience analyzing defensive measures and creating actionable threat intelligence advisories.
• Collaborative work with Detection and Response and operational teams to enhance security measures.
• In-depth knowledge of attacker tactics, tools, techniques (TTPs), agentic threats, and insider abuse vectors.
• Strong analytical and investigative abilities capable of clearly explaining complex detection or control deficiencies to diverse audiences.

Additional Information

Priority will be given to candidates currently authorized to work in Singapore without requiring visa sponsorship from Google. The company is committed to equitable employment practices and welcomes applicants regardless of race, color, religion, gender, sexual orientation, age, citizenship, disability, or veteran status. Accommodations for applicants with disabilities can be requested via the company’s accommodations form.