Remote Cyber Defense Detection Engineer

Google LLC; Ohio; Remote; USD 112,000 - 161,000; Full time

Job summary

Google Cloud's Mandiant team seeks a Cyber Defense Detection Engineer to help clients prepare for and respond to cyber threats. You will tune detections, engineer SIEM content, and support security tool deployments in enterprise environments.

You will collaborate with stakeholders, develop containment plans, and translate complex security concepts for executives. Travel up to 20% may be required; remote work is available within Ohio and the United States.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field, or equivalent practical experience.
• 3 years of experience with detection tuning and creation leveraging various security tools (e.g., SIEM, EDR, or NDR tools).
• Experience with content engineering inside SIEM platforms (e.g., rule creation, advanced correlation searching, etc.).
• Experience with scripting languages (e.g., PowerShell and Python).
• Ability to travel up to 20% of the time as needed.

Responsibilities

• Identify challenges in customer Cyber Defense Centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
• Create and modify SIEM use cases and detection logic, leveraging cyber threat intelligence, written in technology-specific query language or Sigma open signature format.
• Provide expertise for SIEM and other SOC technologies that assist in incident response.
• Measure and improve alert fidelity through metrics creation, tracking, responding to tuning requests, implementing incident-specific detection logic, etc.
• Engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

Skills

detection tuning

content engineering in SIEM

PowerShell

Python

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related

Tools

SIEM

EDR

NDR

SPL

KQL

YARA-L

Job description

Google Cloud's Mandiant team seeks a Cyber Defense Detection Engineer to help clients prepare for and respond to cyber threats. You will tune detections, engineer SIEM content, and support security tool deployments in enterprise environments.

You will collaborate with stakeholders, develop containment plans, and translate complex security concepts for executives. Travel up to 20% may be required; remote work is available within Ohio and the United States.