Senior Cyber Defense Analyst — Incident Response & SOC Leadership

Google; Washington; On-site; USD 138,000 - 200,000; Full time

Benefits offered by this job

Health, dental, vision, life, disa b

401(k) with company match

Paid Time Off: 20 days/year

Sick Time: 40 hours/year (Seattle 69)

Maternity Leave: 28-30 weeks

Baby Bonding Leave: 18 weeks

Holidays: 13 paid days/year

Job summary

Google Cyber Defense Analyst role within Google Cloud/Mandiant focuses on enabling efficient incident response activities within a Cyber Defense Center and collaborating with Security Architects, Engineers, client IT resources, and other business owners to define requirements and deliver recommendations.

You will analyze, respond, contain, remediate, and improve SOC capabilities, protecting customer data across multiple industries while leveraging cutting-edge threat intelligence and frontline

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience in cybersecurity roles (e.g., SOC analyst, malware research, threat hunting) working with EDR and SIEM technologies.
• Experience with SPL, KQL, YARA-L or similar SIEM query languages, with experience in SIEM log flow, aggregation, and forwarding.
• Experience leading incident response activities.

Responsibilities

• Identify issues in CDCs, plan improvements and oversee implementation.
• Conduct real-time analysis using SIEM, EDR, and network based technologies to detect events and false positives.
• Advise on CDC, CSIRT, and SOC Management activities.
• Research cybersecurity intelligence sources and attacker techniques to improve SOC detections and response.
• Engage with client stakeholders to drive resolution for security issues.

Skills

Cybersecurity experience

Incident response leadership

SIEM query languages

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

SPL

KQL

YARA-L

Job description

Google Cyber Defense Analyst role within Google Cloud/Mandiant focuses on enabling efficient incident response activities within a Cyber Defense Center and collaborating with Security Architects, Engineers, client IT resources, and other business owners to define requirements and deliver recommendations.

You will analyze, respond, contain, remediate, and improve SOC capabilities, protecting customer data across multiple industries while leveraging cutting-edge threat intelligence and frontline