Mid
Secure the open source software supply chain on Google's GOSST team
Software engineer on the Google Open Source Security Team (GOSST) in Singapore, building tools to assess and improve the security posture of open source software, find vulnerabilities, and secure open source build/release pipelines. Entry bar is 2 years of software development experience (Go, Python, C/C++, Java, or Rust), with security/open-source and AI-assisted development experience preferred.
走进这场面试
免费 · 一场按这个岗位校准的真语音模拟
可能的面试形态
Google SWE loop: phone screen(s) with coding, followed by onsite rounds covering coding, system/security design, and Googleyness/leadership behavioral interviews.
这场面试考什么
- Finding and triaging vulnerabilities in open source software
- Building tools for supply-chain security (build/release integrity, vulnerability scanning)
- Secure software development practices and advocacy
- AI-assisted development with critical review of AI output
- Engaging external open source maintainers/community
常见提问方向
Describe a security vulnerability you found and how you assessed its impact
Design a tool to assess or improve the security posture of an open source project
How do you review AI-generated code for security issues
Tell me about working with an external open source community or maintainer
Coding question in one of Go/Python/C/C++/Java/Rust with a security angle
相关面试
Senior
Software Engineer, Serverless Networking, Infrastructure
Staff
Staff Software Engineer, Mobile (Android), YouTube
Associate
Software Engineer
Cloudflare
Mid
Vulnerability Management Engineer
Amazon
Senior
Sr. Software Development Engineer, Amazon Optics
Cloudflare
Mid