Security Analyst, Threat Intelligence Operations (English)

Role overview

This position sits within Google’s newly formed Threat Intelligence Operations team and focuses on translating threat intelligence into practical security action for Alphabet. The goal is to surface defensive blind spots early, strengthen protections, and help improve the organization’s overall security stance through well-grounded analysis and clear advisories.

The role is part of the Core team, which develops the technical foundation for Google’s major products and infrastructure. The team works across the company to remove technical barriers, support safe and coherent user experiences, and influence important engineering decisions.

Minimum qualifications

• A bachelor’s degree or an equivalent level of hands-on professional experience.
• At least 2 years working in cybersecurity, threat intelligence, or threat analysis.
• Practical experience with aggregating intelligence, assessing gaps in threat coverage, or building threat models.
• Exposure to automation through programming or scripting, plus experience querying data with SQL to support hunting or intelligence work.
• Fluent English communication skills for cross-team coordination and the creation of high-quality advisories.

Preferred qualifications

• Background in reviewing defensive controls and turning findings into actionable threat guidance.
• Experience partnering with Detection and Response and other operational teams to improve security outcomes.
• Strong knowledge of attacker tactics, tools, and techniques, including agentic threats and internal abuse scenarios.
• Strong analytical and investigative ability, with the skill to explain detection or control weaknesses clearly to different audiences.

Key responsibilities

• Blend public threat reporting with internal security intelligence, including threat scenarios maintained in systems such as optimus and enterprise security intelligence.
• Assess active and known threats against current defensive and protective measures to uncover missing coverage, including reviewing code to judge the effectiveness of security controls and detection logic.
• Carry out focused manual threat hunting where needed so that intelligence remains tied to real operational conditions.
• Prepare detailed threat assessments that help feed threat scenarios into the threat catalogue and engineering planning efforts.

Additional information

Google will give priority to candidates who already have the legal right to work in Singapore and do not need visa sponsorship from Google.

Equal opportunity statement

Google is committed to providing equal employment opportunities. Hiring decisions are made without regard to race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or other legally protected characteristics. Qualified applicants with criminal histories are also considered in line with applicable law. Accommodation requests for applicants with disabilities or special needs can be submitted through the company’s accommodation process.