Senior Incident Response Lead - Remote Forensics Expert

Google LLC; España; Remote; EUR 88,000 - 90,000; Full time

Benefits offered by this job

Equity

Bonus target

Benefits

Job summary

Google LLC is seeking a Senior Incident Response Security Consultant to lead large, client-facing incident response engagements across Spain, Italy, and other remote locations. You will examine cloud, endpoint, and network evidence, codify TTPs/IOCs, and build tools to enhance investigations.

Travel up to 30% may be required. Role involves mentoring consultants, delivering reports to technical and executive audiences, and coordinating with clients and legal teams.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience working end to end incident response investigations, analysis, or containment actions.
• 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
• Ability to travel up to 30% of the time as needed.

Responsibilities

• Lead large, client-facing incident response engagements, examine cloud, endpoint, and network-based sources of evidence.
• Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs) that can be applied to current and future investigations.
• Build scripts, tools, or methodologies to enhance Mandiant’s incident investigation processes.
• Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience

Job description

Google LLC is seeking a Senior Incident Response Security Consultant to lead large, client-facing incident response engagements across Spain, Italy, and other remote locations. You will examine cloud, endpoint, and network evidence, codify TTPs/IOCs, and build tools to enhance investigations.

Travel up to 30% may be required. Role involves mentoring consultants, delivering reports to technical and executive audiences, and coordinating with clients and legal teams.