Engineering Director, Product Security, Core

Lead the strategic outlook and multi-year roadmap for Google's transition to secure-by-construction defenses, ensuring our codebase and supply chain posture scale resiliently alongside AI-driven threats.Mentor a tiered, multi-site organization of 100 engineers, fostering a culture focused on engineering excellence and psychological safety.Drive the adoption of 'well-lit paths' across tech stacks, focusing on safe coding, cryptographic hygiene, and software supply chain security.Partner with Product Area CISOs and engineering executives across Alphabet to align on security roadmaps and drive the upstream adoption of safe-by-default developer platforms.Define Google's code integrity and software supply chain security strategy while leading company-wide initiatives, including Cryptographic Hygiene OKRs and legacy migrations.Minimum qualifications:Bachelor's degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience15 years of experience in software engineering, with 8 years of experience in a technical engineering roleExperience with protecting systemsExperience in vulnerability management, posture management, or risk analysisPreferred qualifications:Master's degree in Electrical Engineering, Computer Engineering, or Computer ScienceExperience motivating others to act by creating a shared sense of outlook or purpose, creating a compelling roadmap for the future, communicating clearly, and employing a collaborative leadership approachExperience leading complex cross-functional engineering projectsExperience with Agentic AI/ML systems and their unique security implications, including policy-based authorizationExperience providing clarity and alignment across the organization on goals, outcomes, and timelines as well as encouraging engineering excellence and coachingEntrepreneurial and strategic mindset, growing at the intersection of technology and business with broad technical experienceAs the Director of Engineering for Product Security (Safe Coding, Cryptography, and Software Supply Chain) in Privacy, Safety, and Security (PSS), you will lead a 100-person global organization across the US, Zurich, and Singapore. You will define the strategic outlook and own the infrastructure responsible for building Google’s secure-by-design development platforms and code integrity systems, ensuring our core software remains resilient at scale.In this role, you will drive defensive security into the AI era by transitioning Google from reactive vulnerability remediation to automated, secure-by-construction systems. This involves establishing "well-lit paths"—including memory-safe languages like Rust and compiler-enforced defaults—and cryptographic policy engines. To succeed, you will navigate the complex trade-offs between strict security guardrails and developer velocity, executing a multi-year roadmap that protects users as the global developer ecosystem grows in complexity.To be effective, you will utilize experience as an engineering executive who flexes easily between deep technical execution and high-level strategic alignment. You will be comfortable with ambiguity, possess a strong bias for action, and collaborate exceptionally well across global boundaries. Above all, you will be an advocate for developer productivity and user safety.The Core team builds the technical foundation behind Google’s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google’s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.Individual pay is determined by factors including job-related skills, experience, and relevant education or training. US: $307000 - $427000 (USD) + 30% bonus target + equity + benefitsLearn more about benefits at Google.Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Sunnyvale, CA, USA; New York, NY, USA.Bachelor's degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience15 years of experience in software engineering, with 8 years of experience in a technical engineering roleExperience with protecting systemsExperience in vulnerability management, posture management, or risk analysis