Senior Incident Response Leader — Remote & Cloud Forensics

Google; Alabama; A distancia; USD 138.000 - 200.000; Jornada completa

Descripción de la vacante

Google is seeking an Incident Response Consultant to join Google Cloud's Mandiant team. You will deliver incident response, threat assessment, managed detection and response, and training services to clients, helping detect and remediate threats at scale.

You will lead investigations across cloud, endpoint, and network, mentor staff, and communicate findings to executives and technical teams. You will collaborate with clients and internal teams to assess risk, drive containment actions, and

Formación

• Bachelor's degree in CS/IS/Cybersecurity or related field.
• 5 years of end-to-end incident response investigations.
• 5 years of network forensics, malware triage, cloud forensics, or disk/memory forensics.

Responsabilidades

• Collaborate with internal and customer teams to investigate and contain incidents.
• Codify attacker TTPs and IOCs for current and future investigations.
• Conduct host forensics, network forensics, log analysis, and malware triage.
• Lead client-facing incident response engagements across cloud, endpoint, and network.
• Develop reports and presentations, communicating findings and remediation strategies to stakeholders.

Conocimientos

Incident response

Forensics analysis

Threat hunting

SIEM (Splunk)

Cloud security

Educación

Bachelor's degree in CS/IS/Cybersecurity or related field

Herramientas

Splunk

Forensic tools

Cloud forensics tooling

Descripción del empleo

Google is seeking an Incident Response Consultant to join Google Cloud's Mandiant team. You will deliver incident response, threat assessment, managed detection and response, and training services to clients, helping detect and remediate threats at scale.

You will lead investigations across cloud, endpoint, and network, mentor staff, and communicate findings to executives and technical teams. You will collaborate with clients and internal teams to assess risk, drive containment actions, and