Senior Cyber Defense Analyst - Remote Incident Response Lead

Google LLC; Florida; Remote; USD 138,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) with company match

Paid time off 20 days

Sick time 40 hours/year

Maternity leave 28-30 weeks

Baby bonding leave 18 weeks

13 paid holidays

Job summary

Google Cloud is seeking a Senior Cyber Defense Senior Analyst (Mandiant) to lead incident response activities within a Cyber Defense Center, coordinating with cross-functional teams across Security Architects and Client IT resources. You will analyze threats, contain incidents, and drive improvements in detection and response capabilities for diverse industries.

Role requires extensive experience in EDR/SIEM, incident response leadership, and strong communication.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related technical field.
• 5 years of experience in cybersecurity roles (e.g., SOC analyst, malware research, threat hunting) with EDR and SIEM.
• Experience with SPL, KQL, YARA-L or similar SIEM query languages, SIEM log flow, aggregation, forwarding.
• Experience leading incident response activities.

Responsibilities

• Identify issues in customer Cyber Defense Centers and plan/improve strategies to completion.
• Conduct real-time analysis using SIEM, Endpoint, and Network tech to identify security events.
• Advise on CDC, CSIRT, and SOC Management activities.
• Research cybersecurity intelligence sources and attacker techniques to improve SOC capabilities.
• Collaborate with client stakeholders to drive resolution for security issues.

Skills

EDR

SIEM

SPL

KQL

YARA-L

Incident response

Leadership

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field

Job description

Google Cloud is seeking a Senior Cyber Defense Senior Analyst (Mandiant) to lead incident response activities within a Cyber Defense Center, coordinating with cross-functional teams across Security Architects and Client IT resources. You will analyze threats, contain incidents, and drive improvements in detection and response capabilities for diverse industries.

Role requires extensive experience in EDR/SIEM, incident response leadership, and strong communication.