Principal Incident Response Consultant, Google Public Sector

Google; Washington (District of Columbia); On-site; USD 207,000 - 301,000; Full time

Benefits offered by this job

20% bonus target

Equity

Comprehensive benefits

Job summary

Google is seeking a Security Engineer in Washington D.C. You will be responsible for managing incident response operations and forensics while collaborating with software engineers to fix vulnerabilities. You should have a Bachelor's degree and substantial experience in the cybersecurity domain.

This role offers a competitive salary range of $207,000 - $301,000 plus bonuses and benefits. The ideal candidate will have familiarity with industry certifications and proven skills in threat detection.

Qualifications

• 8 years of experience managing enterprise incident response operations.
• 3 years of experience scripting or working with code.

Responsibilities

• Conduct analysis and manage consulting engagements on incident response.
• Recommend and document countermeasures while mentoring less experienced staff.
• Identify and develop new business opportunities.

Skills

Incident response operations

Threat containment

Scripting and system design

Education

Bachelor's degree or equivalent practical experience

Tools

Cybersecurity certifications (CISSP, CISM, GIAC)

Job description

Must be a US Citizen to meet customer and compliance requirements, including potential access to classified information.

The application window will be open until at least June 25, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.

Note: By applying to this position you will have an opportunity to share your preferred working location from the following:

• Reston, VA, USA
• Austin, TX, USA
• Boulder, CO, USA
• New York, NY, USA
• Sunnyvale, CA, USA
• Washington D.C., DC, USA

Minimum qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience managing enterprise incident response operations and threat containment.
• 3 years of experience scripting, working with code, or system design.
• Experience conducting host and network computer forensics to isolate root causes.
• Experience performing memory analysis to detect evasion techniques.

Preferred qualifications

• Possession of industry-recognized cybersecurity certifications such as CISSP, CISM, or GIAC (e.g., GCFA, GCFE).
• Experience implementing enterprise security solutions, such as threat detection and hunting, malware intelligence, or Cloud Security Posture Management (CSPM).

About the Job

Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

The Incident Response team within Google Public Sector drives cybersecurity resilience across the public sector, delivering proactive defensive transformations and rapidly deploying incident response to contain breaches, leveraging tangible Mandiant brand recognition value that continuously enriches GPS products and strengthens GPS’s credibility as the premier public sector experts for front line against sophisticated nation-state threats.

Google Public Sector brings the magic of Google to the mission of government and education with solutions purpose-built for enterprises. We focus on helping United States public sector institutions accelerate their digital transformations, and we continue to make significant investments and grow our team to meet the complex needs of local, state and federal government and educational institutions.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $207,000 - $301,000 (USD) + 20% bonus target + bonus + equity + benefits.

Responsibilities

Learn more about benefits at Google.

• Conduct analysis and manage consulting engagements with a focus on incident response and forensics, serving as the subject matter expert and point person from kickoff through full remediation.
• Recommend and document specific countermeasures and mitigating controls while mentoring less experienced staff throughout the engagement lifecycle.
• Identify and develop new business opportunities, articulating the combined capabilities of Google and Mandiant in marketing discussions and capability briefings.
• Develop comprehensive reports and presentations for technical and executive audiences while improving business processes and incident response methodologies.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.