Senior Incident Response Architect - Remote

Google; Seattle (WA); Remote; USD 168,000 - 243,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid time off

Sick time

Holidays

Job summary

Google is seeking an Incident Response Consultant to deliver industry-leading incident response, assessment, and managed detection services. You will investigate, contain, and remediate security incidents at scale for a variety of clients, including high-profile engagements across cloud and on-premise environments.

Role sits within Google Cloud's Mandiant unit, offering exposure to frontline breach response, threat intelligence, and crisis management with opportunities for global impact and

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field or equivalent practical experience.
• 8 years of experience in end-to-end incident response investigations, analysis, or containment actions.
• 8 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk/memory forensics.
• Ability to travel up to 30%.

Responsibilities

• Manage incident response engagements, compromise assessments, and threat-hunting operations with minimal guidance.
• Execute digital forensics, host-based live response, network traffic analysis, and malware analysis across cloud and on-premise environments.
• Automate forensic tasks and develop team utility tools using programming languages.
• Oversee lifecycle of multiple engagements including planning, budgeting, and quality control.
• Draft investigation reports and present findings to client stakeholders and counsel.

Skills

Incident response

Investigation

Threat hunting

Education

Bachelor's degree in Computer Science or related field

Tools

X-Ways

The Sleuth Kit (TSK)

Job description

Google is seeking an Incident Response Consultant to deliver industry-leading incident response, assessment, and managed detection services. You will investigate, contain, and remediate security incidents at scale for a variety of clients, including high-profile engagements across cloud and on-premise environments.

Role sits within Google Cloud's Mandiant unit, offering exposure to frontline breach response, threat intelligence, and crisis management with opportunities for global impact and