Senior Incident Response & Forensics Lead

Socket.dev; Mountain View (CA); On-site; USD 168,000 - 243,000; Full time

Job summary

Mandiant, part of Google Cloud, seeks an Incident Response Consultant to deliver incident response, assessment, transformation, managed detection and response, and training services at scale. You will investigate and respond to threats, coordinating containment, remediation, and crisis management across diverse engagements.

Individual pay is determined by job-related skills, experience, and relevant education or training. US: $168000 - $243000 (USD) + 20% bonus target + equity + benefits.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related technical field or equivalent practical experience.
• 8 years of experience assessing and developing cybersecurity solutions across multiple security domains.
• 8 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
• 8 years of experience working end-to-end incident response investigations, analysis, or containment actions.
• Experience with incident management, customer-facing and computer forensics.
• Ability to travel up to 20% of the time as needed.

Responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
• Lead complex client-facing investigations and examine cloud, endpoint, and network-based sources of evidence.
• Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs); Build scripts, tools, or methodologies to enhance incident investigation processes.
• Develop and present comprehensive and accurate reports and presentations for both technical and executive audiences.

Skills

Incident response

Forensics

Threat hunting

Cloud forensics

Malware triage

Network forensics

Investigation leadership

Containment actions

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related technical field or equivalent practical experience

Job description

Mandiant, part of Google Cloud, seeks an Incident Response Consultant to deliver incident response, assessment, transformation, managed detection and response, and training services at scale. You will investigate and respond to threats, coordinating containment, remediation, and crisis management across diverse engagements.

Individual pay is determined by job-related skills, experience, and relevant education or training. US: $168000 - $243000 (USD) + 20% bonus target + equity + benefits.