Remote Lead Cyber Defense & Incident Response Analyst

Google; Illinois; Remote; USD 138,000 - 200,000; Full time

Job summary

Google is seeking a Cyber Defense Analyst to enable efficient incident response within a Cyber Defense Center. You will collaborate with Security Architects, Engineers, and client IT resources to define requirements and deliver recommendations focused on incident response.

You may also oversee analysis, containment, and remediation for client SOC enhancements. The role sits within Google Cloud's Mandiant cybersecurity practice, with a strong emphasis on real-time threat detection, intel

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related field, or equivalent practical experience.
• 5 years of experience in cybersecurity roles (e.g., SOC analyst, malware research, threat hunting) with EDR and SIEM technologies.
• Experience with SPL, KQL, YARA-L or similar SIEM query languages, with experience in SIEM log flow, aggregation, and forwarding.
• Experience leading incident response activities.

Responsibilities

• Identify issues in customer Cyber Defense Centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
• Conduct real-time analysis using SIEM, Endpoint, and Network based technologies with a focus on identifying security events and false positives.
• Advise on CDC, CSIRT, and SOC Management activities.
• Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operation Center (SOC) incident detection and response capabilities.
• Engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

Skills

Bachelor's degree

5 years cybersecurity experience

SIEM/EDR experience

Incident response leadership

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SPL

KQL

YARA-L

Job description

Google is seeking a Cyber Defense Analyst to enable efficient incident response within a Cyber Defense Center. You will collaborate with Security Architects, Engineers, and client IT resources to define requirements and deliver recommendations focused on incident response.

You may also oversee analysis, containment, and remediation for client SOC enhancements. The role sits within Google Cloud's Mandiant cybersecurity practice, with a strong emphasis on real-time threat detection, intel