Remote Senior Incident Response Lead — Cloud & Forensics

Google LLC; Polska; Remote; PLN 304,000 - 311,000; Full time

Benefits offered by this job

Equity

Benefits

Bonus target

Job summary

Google LLC’s Mandiant division seeks a senior incident response professional. You will lead large client-facing investigations across cloud, endpoint and network sources, codify attacker TTPs/IOCs, and develop tools to enhance incident processes.

You’ll produce detailed reports and trainings for technical and executive audiences while mentoring other consultants. The role requires 5+ years in IR/forensics, strong business acumen, and the ability to travel up to 30%.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience working end to end incident response investigations, analysis, or containment actions.
• 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
• Ability to travel up to 30% of the time as needed.

Responsibilities

• Lead large, client-facing incident response engagements, examine cloud, endpoint, and network-based sources of evidence.
• Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs) that can be applied to current and future investigations.
• Build scripts, tools, or methodologies to enhance Mandiant’s incident investigation processes.
• Develop and present comprehensive and accurate reports, trainings, and presentations for both technical and executive audiences.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.

Skills

Incident response

Forensics

Network forensics

Malware analysis

Cloud forensics

Disk and memory forensics

Travel willingness

Education

Bachelor's degree in Computer Science or related field

Job description

Google LLC’s Mandiant division seeks a senior incident response professional. You will lead large client-facing investigations across cloud, endpoint and network sources, codify attacker TTPs/IOCs, and develop tools to enhance incident processes.

You’ll produce detailed reports and trainings for technical and executive audiences while mentoring other consultants. The role requires 5+ years in IR/forensics, strong business acumen, and the ability to travel up to 30%.