Remote Senior Incident Response Lead: Cloud Forensics

Google LLC; México; A distancia; MXN 1.200.000 - 1.800.000; Jornada completa

Descripción de la vacante

Google’s Mandiant unit seeks a Senior Incident Response Security Consultant to lead client-facing IR engagements, examine evidence from cloud, end-point, and network sources, and codify attacker TTPs and IOCs for current and future investigations.

You will build tools and scripts to enhance investigations and deliver reports to technical and executive audiences, including forensics, threat hunting, and malware triage responsibilities.

Formación

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience working end to end incident response investigations, analysis, or containment actions.
• 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
• 5 years of experience in Linux or Unix.
• 4 years of experience in automation and coding in Python.
• Ability to travel up to 30% of the time.

Responsabilidades

• Lead large, client-facing incident response engagements, examine cloud, end-point, and network-based sources of evidence.
• Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs).
• Build scripts, tools, or methodologies to enhance incident investigation processes.
• Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.

Conocimientos

Incident response

Network forensics

Linux/Unix

Python

Cloud forensics

Travel readiness

Educación

Bachelor's degree in Computer Science / Information Systems / Cybersecurity

Descripción del empleo

Google’s Mandiant unit seeks a Senior Incident Response Security Consultant to lead client-facing IR engagements, examine evidence from cloud, end-point, and network sources, and codify attacker TTPs and IOCs for current and future investigations.

You will build tools and scripts to enhance investigations and deliver reports to technical and executive audiences, including forensics, threat hunting, and malware triage responsibilities.