Senior Cyber Defense Analyst — Incident Response Leader

Google; Virginia; Remote; USD 138,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) match

Paid time off

Sick leave

Maternity leave 28-30 weeks

Baby bonding leave 18 weeks

Paid holidays 13 days

Job summary

Google is seeking a Cyber Defense Analyst to enable efficient incident response within a Cyber Defense Center. You will collaborate with Security Architects, Engineers, and IT resources to define requirements and deliver recommendations focused on incident response for client CDCs.

You may contribute to analysis, containment, remediation, and long-term improvements of SOC operations. Part of Google Cloud, this role emphasizes protecting customer data and assets, leveraging threat intelligence

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience in cybersecurity roles (e.g., SOC analyst, malware research, threat hunting) working with EDR and SIEM technologies.
• Experience with SPL, KQL, YARA-L or similar SIEM query languages, with experience in SIEM log flow, aggregation, and forwarding.
• Experience leading incident response activities.

Responsibilities

• Identify issues in customer Cyber Defense Centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
• Conduct real-time analysis using SIEM, Endpoint, and Network based technologies with a focus on identifying security events and false positives.
• Advise on CDC, CSIRT, and SOC Management activities.
• Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve Security Operation Center (SOC) incident detection and response capabilities.
• Engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

Skills

5 years cybersecurity experience

EDR and SIEM technologies

SPL

KQL

YARA-L

Incident response leadership

Education

Bachelor's degree in Computer Science or related field

Tools

SPL

KQL

YARA-L

Job description

Google is seeking a Cyber Defense Analyst to enable efficient incident response within a Cyber Defense Center. You will collaborate with Security Architects, Engineers, and IT resources to define requirements and deliver recommendations focused on incident response for client CDCs.

You may contribute to analysis, containment, remediation, and long-term improvements of SOC operations. Part of Google Cloud, this role emphasizes protecting customer data and assets, leveraging threat intelligence