Senior Offensive Security Lead: Red Team — Remote Eligible

Google; Chicago (IL); Hybrid; USD 138,000 - 200,000; Full time

Job summary

Google Cloud seeks a Senior Offensive Security Consultant within Mandiant to perform adversarial emulation engagements, craft phishing campaigns, and assess security controls across networks, web/mobile apps, and cloud environments. You will deliver threat analyses, executive-ready reports, and client guidance while traveling up to 20% of the time.

The role involves leading red/purple team activities, threat intelligence-driven exercises, and collaboration with Google Cloud’s security teams.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience with pen testing and red teaming functions, including network, web application, mobile, cloud, social engineering, scripting, or tool development.
• Experience with tools used for wireless, web application, and network security testing.
• Ability to travel up to 20% of the time.

Responsibilities

• Perform red and purple team assessments, assumed breach assessments (e.g., red team engagements with a pre-deployed implant), ransomware readiness reviews (e.g., assessing susceptibility to modern ransomware threats), threat analysis, and social engineering assessments.
• Conduct external and internal wireless assessments, web and mobile applications testing, and embedded system assessments.
• Recognize and safely utilize attacker tools, tactics, and procedures.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences.
• Advise clients on security practices for remediating discovered issues.

Skills

Pen testing

Red teaming

Social engineering

Education

Bachelor's degree in CS or related field

Tools

Wireless testing tools

Web testing tools

Network testing tools

Job description

Google Cloud seeks a Senior Offensive Security Consultant within Mandiant to perform adversarial emulation engagements, craft phishing campaigns, and assess security controls across networks, web/mobile apps, and cloud environments. You will deliver threat analyses, executive-ready reports, and client guidance while traveling up to 20% of the time.

The role involves leading red/purple team activities, threat intelligence-driven exercises, and collaboration with Google Cloud’s security teams.