Senior Cyber Defense Analyst - Remote

Google; Florida; Remote; USD 138,000 - 200,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid time off

Sick time

Maternity leave

Baby bonding leave

13 paid holidays

Job summary

Google Cloud's Mandiant team is seeking a Cyber Defense Analyst to enable efficient incident response within a Cyber Defense Center. You will collaborate with Security Architects, Engineers, and IT resources to define requirements and deliver recommendations to strengthen client SOC capabilities.

The role involves managing incident detection and response improvements across multiple industries, learning new technologies, and protecting client data and corporate assets.

Qualifications

• Bachelor's degree or equivalent practical experience in a technical field.
• 5 years of cybersecurity experience (SOC, malware research, threat hunting) with EDR/SIEM.
• Experience with SPL, KQL, YARA-L or similar SIEM languages; SIEM log flow, aggregation, forwarding.
• Experience leading incident response activities.

Responsibilities

• Identify issues in customer Cyber Defense Centers and plan/execute improvements.
• Conduct real-time analysis using SIEM, Endpoint, and Network technologies to identify security events and false positives.
• Advise on CDC, CSIRT, and SOC Management activities.
• Research cybersecurity intelligence, attacker techniques, containment and remediation to improve SOC detection/response.
• Engage with client stakeholders and internal teams to drive issue resolution.

Skills

Cybersecurity experience

EDR and SIEM

SIEM query languages

Incident response

Education

Bachelor's degree in CS/IS/Cybersecurity or related field

Tools

SPL

KQL

YARA-L

Job description

Google Cloud's Mandiant team is seeking a Cyber Defense Analyst to enable efficient incident response within a Cyber Defense Center. You will collaborate with Security Architects, Engineers, and IT resources to define requirements and deliver recommendations to strengthen client SOC capabilities.

The role involves managing incident detection and response improvements across multiple industries, learning new technologies, and protecting client data and corporate assets.