Senior Incident Response Lead & Forensics Expert

Google; Georgia; On-site; USD 168,000 - 243,000; Full time

Job summary

Google's Mandiant Incident Response Consulting team seeks an experienced consultant to deliver incident response, assessments, and managed detection services for cloud (GCP) and on‑premise environments.

You will lead engagements, perform forensic analysis, threat hunting, and malware triage, and present findings to client stakeholders and leadership. International travel up to 30% is required; the role offers a strong compensation package with a 20% bonus target and equity.

Qualifications

• Bachelor's degree or equivalent practical experience in CS/IS/cybersecurity.
• 8 years end-to-end incident response investigations, analysis or containment.
• 8 years investigative experience with network, malware, cloud, or memory forensics.
• Willingness to travel up to 30%.

Responsibilities

• Manage incident response engagements, compromise assessments, and threat-hunting operations with minimal guidance.
• Execute digital forensics, host-based live response, network traffic analysis, and malware analysis across cloud (GCP) and on-premise environments.
• Automate forensic tasks and build team utility tools using programming languages.
• Oversee the project lifecycle for multiple engagements, including planning, budgeting, and quality control.
• Draft investigation reports and present technical findings clearly to client stakeholders, leadership, and external counsel.

Skills

Incident response

Network forensics

Cloud forensics

Malware triage

Threat hunting

Education

Bachelor's degree or equivalent

Tools

XWays

The Sleuth Kit

Job description

Google's Mandiant Incident Response Consulting team seeks an experienced consultant to deliver incident response, assessments, and managed detection services for cloud (GCP) and on‑premise environments.

You will lead engagements, perform forensic analysis, threat hunting, and malware triage, and present findings to client stakeholders and leadership. International travel up to 30% is required; the role offers a strong compensation package with a 20% bonus target and equity.