Senior Incident Response Lead — Remote

Google; United States; On-site; USD 138,000 - 200,000; Full time

Benefits offered by this job

15% bonus target

Equity

Benefits

Job summary

Google is seeking an Incident Response Consultant to deliver incident response, assessment, transformation, managed detection and response, and training services for clients. You will lead investigations, perform threat hunting, and mentor security consultants across engagements, including high-profile incidents.

Part of Google Cloud, Mandiant brings frontline experience, threat intelligence, and industry-leading validation.

Qualifications

• Bachelor's degree in CS, IS, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
• 5 years of experience working end-to-end incident response investigations, analysis, or containment actions.
• Ability to travel up to 20% of the time.

Responsibilities

• Lead small and contribute to complex client-facing investigations and examine cloud, endpoint, and network-based sources of forensic evidence.
• Collaborate with internal and customer teams to investigate and contain incidents.
• Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs); build scripts, tools, or methodologies to enhance incident investigation processes.
• Develop and present comprehensive and accurate reports and presentations for both technical and executive audiences.

Skills

Investigative experience

Incident response

Travel willingness

Education

Bachelor's degree in CS/IS/Cybersecurity or related field

Job description

Google is seeking an Incident Response Consultant to deliver incident response, assessment, transformation, managed detection and response, and training services for clients. You will lead investigations, perform threat hunting, and mentor security consultants across engagements, including high-profile incidents.

Part of Google Cloud, Mandiant brings frontline experience, threat intelligence, and industry-leading validation.