Remote Cyber Defense Lead — Incident Response

Google; Washington; Remote; USD 168,000 - 243,000; Full time

Benefits offered by this job

Equity

Bonus target

Job summary

Google Cloud's Mandiant Cyber Defense Principal Consultant will enable efficient incident response within a Cyber Defense Center, collaborating with cross-functional teams to define requirements and deliver recommendations that strengthen the client's SOC capabilities.

The role requires 8+ years in SOC/incident response, with hands-on experience in EDR/SIEM, leadership of incident response activities, and clear communication to senior stakeholders. Remote options within the US are available.

Qualifications

• 8+ years in SOC/related roles with EDR/SIEM experience.
• Experience leading incident response activities and communicating status to senior stakeholders.
• Experience across multiple OS and directory services; strong written and verbal communication.

Responsibilities

• Identify challenges in customer Cyber Defense Centers and plan improvements to completion.
• Perform real-time analysis using SIEM/EDR to detect security events and reduce false positives.
• Advise on CDC/CSIRT/SOC management activities and engage with client stakeholders.

Skills

SOC analyst

Threat hunting

Incident response

EDR/SIEM

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM

EDR

Job description

Google Cloud's Mandiant Cyber Defense Principal Consultant will enable efficient incident response within a Cyber Defense Center, collaborating with cross-functional teams to define requirements and deliver recommendations that strengthen the client's SOC capabilities.

The role requires 8+ years in SOC/incident response, with hands-on experience in EDR/SIEM, leadership of incident response activities, and clear communication to senior stakeholders. Remote options within the US are available.