Role overview

Qualifications

Bachelor's degree in Computer Science or related technical field
5 years of experience managing Web Application Firewalls (WAF)
Experience with vulnerability management and cloud-hosted security scanning tools
Experience with scripting or programming languages (e.g., Python, Java, Kotlin)

Responsibilities

Manage and optimize core application defenses including WAF and automated vulnerability scanning tools
Architect and maintain security gating processes within the CI/CD pipeline
Partner with development teams to remediate vulnerabilities and lead the public bug bounty initiative
Mentor junior engineers and present security postures to upper management

Key facts

Remote from: United States
Full time
Senior (5-10 years)
Security Engineer
English

Hard skills

Application Firewall CI/CD Vulnerability Management Scripting Cloud Security Applications Threat Management Programming Languages Large Language Modeling Cyber Risk

Other skills

Mentorship
Communication
Collaboration

About the company

Google Fiber

Internet Service Providers (ISPs)

At Google Fiber and Google Fiber Webpass, we use the latest technology, including fiber optic and millimeter wave, to deliver the very best internet to our customers. No data caps, equipment fees, or annual contracts included. Everyone deserves access to fast, reliable, fairly priced internet. Bring your creativity, drive, and everything you got—and help us make it happen. Check out our career opportunities at g.co/fiber/careers.

Company details

Company typeSME

IndustryInternet Service Providers (ISPs)

Company size501 - 1000

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

At GFiber, we believe that great internet has the power to drive innovation, strengthen communities, enable the impossible, and do all the everyday things that make all of our world go round. And the job of creating better internet is never done - so we’re growing! Our team is committed to building a place where people who want to make a difference can grow their careers and find their spot to belong.

GFiber is an Alphabet company that brings Google Fiber and Google Fiber Webpass internet services to homes and businesses across the United States. Our teams are expanding as we connect more cities and people to exceptional internet.

The application window will be open until at least July 19th, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.

This role is not eligible for immigration sponsorship.

Role Description

As a Senior Application Security Engineer, you will be a core technical advisor for securing GFiber’s applications and development ecosystems. You will partner closely with engineering teams to review code, secure software delivery pipelines, and design frameworks that make writing secure code the path of least resistance. You will lead initiatives ranging from managing threat detection boundaries to establishing cutting-edge AI integrations within our development lifecycle. This is a highly collaborative role where you will influence engineering practices, champion security culture across teams, and occasionally share strategic insights with senior leadership.

In this role, you’ll:

Manage and optimize core application defenses, including the Web Application Firewall (WAF) and automated vulnerability scanning tools, while monitoring key security metrics.
Architect and maintain security gating processes within the CI/CD pipeline to ensure secure, seamless software delivery.
Govern and secure our growing AI pipeline within the SDLC by implementing input/output monitoring, context controls, and safety guardrails around AI-generated code.
Partner with development teams to remediate vulnerabilities, scale the security champions program, and co-lead our public bug bounty initiative.
Mentor junior engineers and analysts, and occasionally present security postures, trends, and program milestones to upper management.

At a minimum, we would like you to have:

Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.
5 years of experience with managing Web Application Firewalls (WAF) and integrating automated security gating into CI/CD pipelines.
Experience with vulnerability management and cloud-hosted application security scanning tools.
Experience collaborating directly with software development teams on threat mitigation.
Experience with scripting or programming languages (i.e., Python, Java, Kotlin) to automate security processes.

It’s preferred if you have:

Experience implementing security guardrails, context controls, or monitoring for Large Language Models (LLMs) and AI-assisted development tools.
Experience leading or growing a security champions program or a bug bounty platform.
Experience mentoring junior security professionals or teaching secure coding practices to engineering teams.
Experience analyzing technical security risks and presenting metrics or findings to upper management.
Knowledge of ISP infrastructure, web-scale networks, or cloud environments (e.g., GCP, AWS).

The US base salary range for this full-time position is between $156,900 - $229,700 + bonus + benefits. As pay varies by location, your recruiter will share more about the specific salary range for your targeted location during the hiring process.

#LI-DNI

GFiber is committed to equal opportunity employment regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, citizenship, marital status, disability or Veteran status. Disclosure is voluntary, and this information will be kept confidential in compliance with Google's Candidate Privacy Policy. For more information please refer to our Equal Employment Opportunity Policy and the EEOC's "Know your rights: workplace discrimination is illegal" (PDF).

It's important to us to create an accessible, inclusive workplace for everyone. If you have a need that requires accommodation, please let us know by completing our accommodations for applicants form. Our candidate accommodations team will then connect with you to confidentially discuss your options.

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.