Remote US: Security SOAR Engineer for CDC Automation & IR

Google; United States; Hybrid; USD 112,000 - 161,000; Full time

Job summary

Google is seeking a Cyber Defense professional to enable automation and orchestration within a Global CDC. You will work with Mandiant Architects, Analysts, and client IT teams to define requirements and deliver automation-focused improvements.

The role involves administering security technologies, learning new tools, and protecting customer data across industries. Google Cloud, with Mandiant, is a leader in cyber defense and incident response, offering a dynamic, fast-paced environment.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 3 years of experience configuring and maintaining SOAR technologies as part of Security Engineering, System Administration, or a similar role.
• 3 years of experience working with SOC/CSIRT or other incident response related teams.
• Experience with SIEM solutions (e.g., writing queries, searches, alerts, dashboards).

Responsibilities

• Identify issues in customer Cyber Defense Centers, formulate strategies for improvement, identify candidates for automation, plan implementation of improvements, and execute/oversee plans to completion.
• Advise on technologies relied upon by the client CDC, CSIRT, and SOC.
• Provide expertise for SOAR and other SOC technologies that assist in incident response.
• Create and modify SOAR playbooks written in Python.
• Engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

Skills

Python scripting

SOC/CSIRT experience

Incident response

Education

Bachelor's degree in Computer Science or related field

Tools

SOAR platforms

SIEM solutions

Job description

Google is seeking a Cyber Defense professional to enable automation and orchestration within a Global CDC. You will work with Mandiant Architects, Analysts, and client IT teams to define requirements and deliver automation-focused improvements.

The role involves administering security technologies, learning new tools, and protecting customer data across industries. Google Cloud, with Mandiant, is a leader in cyber defense and incident response, offering a dynamic, fast-paced environment.