Cyber Defense Consultant, Mandiant, Google Cloud

Google; Illinois; Hybrid; USD 112,000 - 161,000; Full time

Benefits offered by this job

Health, dental, vision, life, and long

Disability insurance

401(k) with company match

Paid time off 20 days/year

Sick time 40 hours/year

Maternity leave 28-30 weeks

Baby bonding leave 18 weeks

13 paid holidays

Job summary

Google Cloud's Mandiant team seeks a Cyber Defense Consultant to build, maintain, and enable data, tools, and dashboards that drive actionable cyber defense reporting. You will collaborate with Mandiant architects, analysts, and client IT to define requirements and deliver recommendations for the client’s Cyber Defense Center.

Responsibilities include developing SIEM dashboards, improving operations with automation, and communicating findings to leadership.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related technical field or equivalent practical experience.
• 3 years configuring and maintaining SOAR technologies as part of security engineering, system administration, or similar.
• 3 years writing reports for executive leadership and technical audiences.
• 3 years data analytics including metrics and reporting or BI.
• 2 years working with cyber defense teams in SOC/CIRT or similar.

Responsibilities

• Leverage tools to synthesize security data and develop SIEM dashboards for operational metrics.
• Apply security architecture and automation to streamline cyber defense operations.
• Articulate timely findings to advance cyber defense initiatives.
• Operationalize threat intelligence across functions to address threats.
• Engage with clients and cross-functional teams to drive rapid security issue resolution.

Skills

SOAR configuration

Security analytics

Executive reporting

Cross-team collaboration

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

SIEM

Job description

Applicants in the County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Applicants in San Francisco: Qualified applications with arrest or conviction records will be considered for employment in accordance with the San Francisco Fair Chance Ordinance for Employers and the California Fair Chance Act.

In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:

• Health, dental, vision, life, disability insurance
• Retirement Benefits: 401(k) with company match
• Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• Sick Time: 40 hours/year (increased to 69 hours/year for Seattle) including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• Holidays: 13 paid days per year

Note: By applying to this position you will have an opportunity to share your preferred working location from the following:

Remote locations: California, USA; Georgia, USA; Illinois, USA; Virginia, USA; Washington, USA.

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related technical field or equivalent practical experience.
• 3 years of experience configuring and maintaining Security Orchestration, Automation, and Response (SOAR) Technologies as part of Security Engineering, System Administration, or a similar role.
• 3 years of experience in writing reports for executive leadership and technical audiences to communicate findings, assessments, and recommendations.
• 3 years of experience in data analytics to include metrics and reporting or business intelligence.
• 2 years of experience working with cyber defense teams in an operational environment such as SOC/CIRT, Cyber Threat Intelligence, or Blue Team.

Preferred qualifications:

• Knowledge of scripting languages (e.g., Python).
• Understanding of the incident response, containment, and remediation process.

About The Job:

The Cyber Defense Consultant is responsible for building, maintaining, and enabling the technologies, tools, data sets, and appropriate metrics to provide actionable, timely, and relevant operational and tactical reporting that drive cyber defense initiatives. The Security Consultant will collaborate with multiple cross‑functional teams like Mandiant Architects, Mandiant Analysts, client Information Technology (IT) resources, and other business resource owners, to define requirements and deliver recommendations focused on operations required to support the client’s Cyber Defense Center (CDC). In addition, the Security Consultant may be responsible for building and maintaining reporting dashboards and operational metrics and communicating key areas of improvement to enhance the client’s overall CDC capabilities.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant’s cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation‑state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today’s advanced threats than anyone.

Individual pay is determined by factors including job‑related skills, experience, and relevant education or training.

US: $112000 - $161000 (USD) + 15% bonus target + equity + benefits

Responsibilities:

Learn more about benefits at Google .

• Leverage investigative tools to synthesize disparate se curity data and develop SIEM dashboards that drive operational metrics.
• Apply knowledge and experience in security architecture and automation to streamline and enhance cyber defense operations.
• Articulate timely, relevant findings to actively advance strategic cyber defense initiatives.
• Operationalize threat intelligence across functions to address key organizational threats.
• Engage with clients and cross‑functional teams to drive rapid resolution of security issues.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .