EP233 Product Security Engineering at Google: Resilience and Security

Topics covered:

• Could you share insights into how Product Security Engineering approaches at Google have evolved, particularly in response to emerging threats (like Log4j in 2021)?
• You mentioned applying SRE best practices in detection and response, and overall in securing the Google Cloud products. How does Google balance high reliability and operational excellence with the needs of detection and response (D&R)? 
• How does Google decide which data sources and tools are most critical for effective D&R?
• How do we deal with high volumes of data?