Senior Offensive Security Consultant - Remote, Equity

Google; United States; Hybrid; USD 138,000 - 200,000; Full time

Benefits offered by this job

Equity

Bonus target

Benefits

Job summary

Mandiant's Red Team within Google Cloud delivers adversarial emulation engagements for large enterprises, including Threat Intel-led red teamings, pre-deployed implants, phishing, and social engineering campaigns.

This role involves external/internal wireless, web and mobile app testing, reporting for technical and executive audiences, and advising clients on remediation; travel up to 20% is expected.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience with pen testing and red teaming functions, including network, web application, mobile, cloud, social engineering, scripting, or tool development.
• Experience with tools used for wireless, web application, and network security testing.
• Ability to travel up to 20% of the time.

Responsibilities

• Perform red and purple team assessments, assumed breach assessments (e.g., red team engagements with a pre-deployed implant), ransomware readiness reviews (e.g., assessing susceptibility to modern ransomware threats), threat analysis, and social engineering assessments.
• Conduct external and internal wireless assessments, web and mobile applications testing, and embedded system assessments.
• Recognize and safely utilize attacker tools, tactics, and procedures.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences.
• Advise clients on security practices for remediating discovered issues.

Skills

Pen testing

Red teaming

Wireless testing

Web app testing

Network testing

Travel 20%

Job description

Mandiant's Red Team within Google Cloud delivers adversarial emulation engagements for large enterprises, including Threat Intel-led red teamings, pre-deployed implants, phishing, and social engineering campaigns.

This role involves external/internal wireless, web and mobile app testing, reporting for technical and executive audiences, and advising clients on remediation; travel up to 20% is expected.