Offensive Security Consultant, Google Cloud, Mandiant Consulting

Google; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Google in Singapore is seeking experienced offensive security professionals to perform Red and Purple Team assessments, emulating real-world attacker techniques across on-prem and cloud environments.

The role involves creating security tools, researching techniques, and delivering clear reports to technical and executive stakeholders, while mentoring junior staff and guiding engagements from kickoff through remediation.

Qualifications

• Bachelor's degree or equivalent practical experience in a technical field.
• 3 years of offensive security/red teaming experience across networks, apps, cloud and social engineering.
• Experience in creating security tools and reporting findings clearly.

Responsibilities

• Perform Red and Purple Team assessments including end-to-end adversarial emulation.
• Expand capabilities through tool development and threat research.
• Develop comprehensive reports and present findings to technical and executive audiences.
• Assist scoping engagements, lead teams, and mentor colleagues.

Skills

Red Teaming

Offensive Security

Scripting

Cloud security

Network security

Education

Bachelor's degree in CS or related field

Tools

Python

C#

C/C++

Rust

Job description

Google will be prioritizing applicants who have a current right to work in Singapore, and do not require Google's sponsorship of a visa.

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related technical field, or equivalent practical experience.
• 3 years of experience in offensive security/red teaming functions, including network, web application, mobile, cloud, social engineering, scripting, or tool development.

Preferred qualifications:

• Certifications related to offensive security including OSCE, OSEP, OSEE, OSCP, CISSP, CISA or relevant SANS courses.
• Experience in creating security tools and understanding of underlying programming languages (such as Python, C#, C/C++, Rust, Nim or similar).
• Excellent communication skills, with the ability to communicate technical details through reporting and presentations to both technical and executive audiences.

About The Job

Mandiant's offensive security consulting team is responsible for performing Red and Purple Team assessments of customer environments. We breach our customer networks to reveal flaws, test weaknesses, and to exercise defensive teams and capabilities. We take Mandiant's frontline incident response and intelligence knowledge and apply cutting edge techniques and tradecraft being used by threat actors in the wild.

Our consultants are offensive security experts who specialize at executing all stages of the attack lifecycle, from initial compromise, privilege escalation, lateral movement, to achieving desired objectives. We adapt to customer technologies, from on-premises networks, to modern cloud architecture, to zero-trust and identity-centric environments, and everything in between.

We work together to emulate ransomware, financial, espionage, and other threat actors, and we aim to deliver the most realistic breach scenarios.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

• Perform Red and Purple Team assessments, including end-to-end adversarial emulation of cyber attacks against customer organisations, and other technical cyber assessments including external penetration, web application, mobile and wireless security testing.
• Expand the team’s capabilities through tool creation, research on offensive techniques, incorporation of threat actor intelligence, internal presentations and knowledge share.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences, and act as a trusted advisor to c-level, security leaders and other customer stakeholders.
• Assist with scoping prospective engagements, leading teams for engagements from kickoff through remediation phase, as well as mentoring other staff.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .