Principal Threat Analyst, Mandiant, Intelligence Services

Google LLC; Washington (District of Columbia); Hybrid; USD 168,000 - 243,000; Full time

Job summary

Google LLC's Mandiant Intelligence Services is seeking a Principal Threat Analyst to deliver risk intelligence and investigative results for client-facing engagements. You will harness data to solve complex cyber security problems and serve as a bridge to Google’s vast cybersecurity network.

The role is primarily onsite in Reston, VA with remote location options; it requires an active TS/SCI clearance with polygraph and travel up to 25% internationally.

Qualifications

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in a customer-facing investigative role in cyber security.
• Experience engaging with technical stakeholders and executive leaders.
• Active Top Secret/SCI clearance with current polygraph.
• Ability to travel up to 25% internationally.

Responsibilities

• Develop and apply problem-solving techniques to data sets to perform continuous hunting activities within customer environments for previously unidentified risks.
• Utilize Mandiant and supported vendor technologies to conduct investigations and examine endpoint and network-based sources of evidence.
• Apply CTI research, analysis, and report writing skills to service strategic, operational, and tactical audiences.
• Correlate intelligence to develop deeper understandings of tracked threat activity.
• Utilize tools and best practices for tracking advanced threats, tools, techniques, and procedures (TTPs) of attacker’s motivations, and industry and attacker trends.

Skills

Customer-facing

Cyber security

Threat intelligence

Stakeholder communication

Education

Bachelor's degree

Job description

Principal Threat Analyst, Mandiant, Intelligence Services

Share Principal Threat Analyst, Mandiant, Intelligence Services

corporate_fare Google place Virginia, USA ; District of Columbia, USA ; +1 more laptop_windows Remote eligible

This position requires onsite client-facing work two to four days a week in Reston, VA. Note: By applying to this position you will have an opportunity to share your preferred working location from the following:
Remote locations: Virginia, USA; District of Columbia, USA; Maryland, USA.

• Bachelor's degree or equivalent practical experience.
• 8 years of experience in a customer-facing investigative role in cyber security (e.g., Network Forensics Analyst, Threat Intelligence Analyst).
• Experience engaging with, and presenting to, technical stakeholders and executive leaders.
• Must possess an active Top Secret/SCI security clearance with current polygraph.
• Ability to travel up to 25% internationally.

Preferred qualifications:

• Experience with CTI methodologies and application within cyber security organizations.
• Experience in the analysis of CTI, supporting monitoring, detection, and response capabilities.
• Experience in using tools for analysis such as intrusion operations, enterprise security controls, log analysis, network flow and traffic analysis, incident response processes, cyber attack lifecycles and models.
• Experience in security operations (SOC), incident response, threat hunting, IT compliance or equivalent.

About the job

You will use data to solve investigative problems and deliver results under pressure. As a Principal Analyst in our Advanced Intelligence Access (AIA) program, you will be a trusted advisor, providing clients with direct access to GTIG's comprehensive risk intelligence, including raw data.

Your experience will empower clients to make informed decisions and take action, ensuring their security and operational resilience. In this client-facing role, you will also serve as a bridge to GTIG's vast network of cybersecurity, risk intelligence, and information operations professionals.

You will use your experience with governmental objectives to prioritize tasks, demonstrate measurable impact, and communicate professionally.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone. Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $168000 - $243000 (USD) + 20% bonus target + equity + benefits

Learn more about benefits at Google.

• Develop and apply problem-solving techniques to data sets to perform continuous hunting activities within customer environments for previously unidentified risks.
• Utilize Mandiant and supported vendor technologies to conduct investigations and examine endpoint and network-based sources of evidence.
• Apply CTI research, analysis, and report writing skills to service strategic, operational, and tactical audiences.
• Correlate intelligence to develop deeper understandings of tracked threat activity.

Ultilize tools and best practices for tracking advanced threats, tools, techniques, and procedures (TTPs) of attacker’s motivations, and industry and attacker trends.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy , Know your rights: workplace discrimination is illegal , Belonging at Google , and How we hire .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.