Senior IR Lead: Cloud & Forensics

Google; United States; On-site; USD 138,000 - 200,000; Full time

Job summary

Google Cloud's Mandiant team is seeking a Senior Incident Response Security Consultant to lead end-to-end incident response engagements across cloud, endpoint, and network environments. You will drive investigations, containment, and remediation while coordinating with clients and internal stakeholders to minimize business risk.

The role requires strong experience in incident response, forensics, and threat containment, with the ability to mentor junior consultants and communicate findings to

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience working end-to-end incident response investigations, analysis, or containment actions.
• 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
• Ability to travel up to 30% of the time.

Responsibilities

• Collaborate with internal and customer teams to investigate and contain incidents.
• Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations.
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
• Lead client-facing incident response engagements, examine cloud, endpoint, and network-based sources of evidence.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences.

Skills

Incident response

Digital forensics

Cloud forensics

Malware triage

Team mentoring

Education

Bachelor's degree in CS/InfoSec or related field

Tools

Cloud platform certifications

Job description

Google Cloud's Mandiant team is seeking a Senior Incident Response Security Consultant to lead end-to-end incident response engagements across cloud, endpoint, and network environments. You will drive investigations, containment, and remediation while coordinating with clients and internal stakeholders to minimize business risk.

The role requires strong experience in incident response, forensics, and threat containment, with the ability to mentor junior consultants and communicate findings to