Senior Incident Response & Forensics Leader

Google; Chicago (IL); Remote; USD 168,000 - 243,000; Full time

Benefits offered by this job

Health, dental, vision, life, short/di

401(k) with company match

Paid Time Off: 20 days/year

Sick Time: 40 hours/year (Seattle 69)

Maternity Leave: 28-30 weeks

Baby Bonding Leave: 18 weeks

13 paid holidays

Job summary

Google Cloud/Mandiant is seeking a Principal Incident Response Security Consultant to lead enterprise incident response engagements across cloud and on-prem environments. This role requires deep expertise in forensics, threat hunting, and cross-functional collaboration with senior stakeholders.

You will drive end-to-end investigations, deliver technical guidance, and communicate findings to leadership. Flexible location in the United States with up to 30% travel, and a compensation package

Qualifications

• Bachelor's degree in CS, IS, cybersecurity, or equivalent practical experience.
• 8 years of end-to-end incident response investigations, analysis, or containment actions.
• 8 years of investigative experience with network forensics, cloud forensics, or memory/disk forensics.
• Ability to travel up to 30%.

Responsibilities

• Manage incident response engagements and threat-hunting operations.
• Perform digital forensics across cloud (GCP) and on-prem environments.
• Automate forensic tasks and build tooling.
• Draft reports and present findings to clients and leadership.

Skills

Incident response

Network forensics

Cloud forensics

Threat hunting

Malware analysis

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

X-Ways

TSK

Job description

Google Cloud/Mandiant is seeking a Principal Incident Response Security Consultant to lead enterprise incident response engagements across cloud and on-prem environments. This role requires deep expertise in forensics, threat hunting, and cross-functional collaboration with senior stakeholders.

You will drive end-to-end investigations, deliver technical guidance, and communicate findings to leadership. Flexible location in the United States with up to 30% travel, and a compensation package