Senior Cyber Defense Analyst — Remote Incident Response Lead

Google LLC; California; Remote; USD 138,000 - 200,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid time off

Sick time

Maternity leave

Baby bonding leave

13 paid holidays

Job summary

Google Cloud's Mandiant unit seeks a Senior Cyber Defense Senior Analyst to lead incident response, detect threats, and coordinate with cross-functional teams to secure client environments. You will work within a dynamic Cyber Defense Center, leveraging EDR, SIEM, and threat intel to improve detection and response capabilities.

The role emphasizes collaboration across Security Architects, Engineers, and IT resources, with responsibilities spanning planning, containment, remediation, and

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience in cybersecurity roles (e.g., SOC analyst, malware research, threat hunting) working with EDR and SIEM technologies.
• Experience with SPL, KQL, YARA-L or similar SIEM query languages, with experience in SIEM log flow, aggregation, and forwarding.
• Experience leading incident response activities.

Responsibilities

• Identify issues in customer CDCs and formulate strategies for improvement, plan implementation, and oversee plans to completion.
• Conduct real-time analysis using SIEM, Endpoint, and Network based technologies with focus on identifying security events and false positives.
• Advise on CDC, CSIRT, and SOC Management activities.
• Research and leverage cybersecurity intelligence sources, attacker techniques, containment methodologies, and remediation processes to improve SOC detection and response capabilities.
• Engage and collaborate with client stakeholders to drive resolution for security issues.

Skills

Cybersecurity experience

EDR/SIEM

SIEM query languages

Incident response lead

Education

Bachelor's degree or equivalent

Job description

Google Cloud's Mandiant unit seeks a Senior Cyber Defense Senior Analyst to lead incident response, detect threats, and coordinate with cross-functional teams to secure client environments. You will work within a dynamic Cyber Defense Center, leveraging EDR, SIEM, and threat intel to improve detection and response capabilities.

The role emphasizes collaboration across Security Architects, Engineers, and IT resources, with responsibilities spanning planning, containment, remediation, and