Principal Engineer, Kernel and Virtualization Security

_corporate_fare_ Google _place_ Sunnyvale, CA, USA; Kirkland, WA, USA; +2 more; +1 more _bar_chart_ Director _info_outline_

XIn accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

+ Health, dental, vision, life, disability insurance

+ Retirement Benefits: 401(k) with company match

+ Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment

+ Sick Time: 40 hours/year (statutory, where applicable); 5 days/event (discretionary)

+ Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks

+ Baby Bonding Leave: 18 weeks

+ Holidays: 13 paid days per year

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: **Sunnyvale, CA, USA; Kirkland, WA, USA; Zürich, Switzerland** .

**Minimum qualifications:**

+ Bachelor's degree in Computer Science, a related technical field, or equivalent practical experience.

+ 15 years of experience in security engineering, software engineering, or a related technical discipline, with a focus on large-scale systems.

+ Experience designing and securing low-level system components (e.g., operating system kernels, hypervisors, or device drivers).

+ Experience with systems security, including kernel internals, CPU architecture, platform-level isolation boundaries, and virtualization technologies.

**Preferred qualifications:**

+ Master's degree or PhD in Computer Science or a field related to systems or security engineering.

+ Expertise in software security failure patterns and proactive hardening techniques, particularly for critical, low-level infrastructure.

+ Understanding of Linux kernel internals, build systems, and the security patch lifecycle in a hyperscale environment.

+ Ability to quickly assimilate new architectures, frameworks, and hardening technologies and drive consensus among executive stakeholders.

+ Recognized contributions to the open-source community, such as kernel or virtualization projects, publications, or presentations at major security or systems conferences.

**About the job**

As the Principal Engineer, Kernel and Virtualization Security, you will be the most senior technical leader in Cloud CISO Security Engineering, dedicated to securing the foundation of Google's production platform. You will be responsible for the security of our kernel and virtualization layers. You will pioneer the architecture of next-generation isolation frameworks and drive a cross-company strategy to harden our core compute infrastructure against sophisticated threats. You will utilize expertise in low-level systems security, the ability to lead through influence at the highest levels, and the technical gravity to secure the entire Google Cloud and Technical Infrastructure portfolio.

Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.

The US base salary range for this full-time position is $307,000-$427,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more aboutbenefits at Google (https://careers.google.com/benefits/) .

**Responsibilities**

+ Drive the multi-year technical roadmap for Linux kernel hardening across Google’s production fleet.

+ Lead the response to critical kernel CVEs and CPU vulnerabilities, overseeing the security patch upkeep and release lifecycle to protect our virtualization isolation layers.

+ Architect and drive strategic initiatives for the systemic hardening of key virtualization frameworks to prevent lateral movement and privilege escalation.

+ Act as the technical authority on platform-level security tradeoffs, providing guidance to resolve complex architectural decisions for Google Cloud.

+ Pioneer the architecture and design of new virtualization frameworks and the adoption of novel open-source technologies that align with Google's strategic goals for secure, performant compute.

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google'sApplicant and Candidate Privacy Policy (./privacy-policy) .

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See alsoGoogle's EEO Policy (https://www.google.com/about/careers/applications/eeo/) ,Know your rights: workplace discrimination is illegal (https://careers.google.com/jobs/dist/legal/EEOC\_KnowYourRights\_10\_20.pdf) ,Belonging at Google (https://about.google/belonging/) , andHow we hire (https://careers.google.com/how-we-hire/) .

If you have a need that requires accommodation, please let us know by completing ourAccommodations for Applicants form (https://goo.gl/forms/aBt6Pu71i1kzpLHe2) .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also https://careers.google.com/eeo/ and https://careers.google.com/jobs/dist/legal/OFCCP_EEO_Post.pdf If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form: https://goo.gl/forms/aBt6Pu71i1kzpLHe2.