Remote Senior Cyber Defense & Incident Response Lead

Google; California; Remote; USD 138,000 - 200,000; Full time

Benefits offered by this job

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

401(k) with company match

Paid Time Off

Sick Time

Maternity Leave

Baby Bonding Leave

Holidays

Job summary

Google, part of Google Cloud's Mandiant team, is seeking a Cyber Defense Analyst to bolster incident response within a dynamic CDC. You will work with Security Architects, Engineers, and client IT resources to define requirements and deliver rapid, actionable recommendations to improve SOC detections and responses.

You will analyze real-time events using SIEM and EDR technologies, lead incident response activities, and collaborate with cross-functional stakeholders to drive remediation and

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience in cybersecurity roles (e.g., SOC analyst, malware research, threat hunting) working with EDR and SIEM technologies.
• Experience with SPL, KQL, YARA-L or similar SIEM query languages, with experience in SIEM log flow, aggregation, and forwarding.
• Experience leading incident response activities.

Responsibilities

• Identify issues in customer Cyber Defense Centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
• Conduct real-time analysis using SIEM, Endpoint, and Network based technologies with a focus on identifying security events and false positives.
• Advise on CDC, CSIRT, and SOC Management activities.
• Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve SOC incident detection and response capabilities.
• Engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

Skills

Cybersecurity experience

EDR/SIEM

SPL/KQL/YARA-L

Incident response leadership

Education

Bachelor's degree in CS/Info Systems/Cybersecurity

Tools

SIEM

EDR

Job description

Google, part of Google Cloud's Mandiant team, is seeking a Cyber Defense Analyst to bolster incident response within a dynamic CDC. You will work with Security Architects, Engineers, and client IT resources to define requirements and deliver rapid, actionable recommendations to improve SOC detections and responses.

You will analyze real-time events using SIEM and EDR technologies, lead incident response activities, and collaborate with cross-functional stakeholders to drive remediation and