Senior Cloud Incident Response Lead (Remote)

Google; Cambridge (MA); Hybrid; USD 138,000 - 200,000; Full time

Job summary

Google is seeking an Incident Response Consultant within Google Cloud/Mandiant to lead and coordinate security investigations, containment, remediation, and crisis management across cloud, endpoint, and network environments.

You will manage large client-facing engagements, train security professionals, and translate technical findings for executives, legal counsel, and technical staff while delivering scalable incident response services.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience working end-to-end incident response investigations, analysis, or containment actions.
• 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
• Ability to work non-standard hours, including weekends, night shifts, holidays and on shift-based schedules as required.

Responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents.
• Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations.
• Collaborate and provide technical leadership for internal and customer teams to investigate and contain incidents.
• Lead complex client-facing investigations and examine cloud, endpoint, and network-based sources of evidence.

Skills

Incident response

Network forensics

Cloud forensics

Security investigations

Education

Bachelor's degree in Computer Science or related field

Tools

Cloud certifications

Job description

Google is seeking an Incident Response Consultant within Google Cloud/Mandiant to lead and coordinate security investigations, containment, remediation, and crisis management across cloud, endpoint, and network environments.

You will manage large client-facing engagements, train security professionals, and translate technical findings for executives, legal counsel, and technical staff while delivering scalable incident response services.