EP233 Product Security Engineering at Google: Resilience and Security

Guest:

• Cristina Vintila, Product Security Engineering Manager, Google Cloud

Topic:

• Could you share insights into how Product Security Engineering approaches at Google have evolved, particularly in response to emerging threats (like Log4j in 2021)?
• You mentioned applying SRE best practices in detection and response, and overall in securing the Google Cloud products. How does Google balance high reliability and operational excellence with the needs of detection and response (D&R)?
• How does Google decide which data sources and tools are most critical for effective D&R?
• How do we deal with high volumes of data?

Resources:

• EP215 Threat Modeling at Google: From Basics to AI-powered Magic
• EP117 Can a Small Team Adopt an Engineering-Centric Approach to Cybersecurity?
• Podcast episodes on how Google does security
• EP17 Modern Threat Detection at Google
• EP75 How We Scale Detection and Response at Google: Automation, Metrics, Toil
• Google SRE book
• Google SRS book