Senior Red Team Consultant (Remote Options)

Google; Arizona; Hybrid; USD 138,000 - 200,000; Full time

Benefits offered by this job

Equity compensation

Bonus target

Job summary

Google is seeking a security professional to join Mandiant’s Red Team within Google Cloud, delivering adversarial emulation engagements for large enterprises and developing social engineering campaigns. The role may involve building command and control infrastructure and conducting phishing simulations while evading detection by client security operations teams.

The position supports external and internal assessments and requires strong understanding of attacker tools, TTPs, and threat analysis.

Qualifications

• Bachelor's degree in CS/IS/Cybersecurity or equivalent practical experience.
• 5 years of pen testing and red team experience across networks, web/mobile, cloud, and social engineering.
• Experience with wireless, web, and network security testing tools.
• Ability to travel up to 20%.

Responsibilities

• Perform red and purple team assessments, including pre-deployed implants and ransomware readiness reviews.
• Conduct external and internal wireless, web/mobile apps, and embedded system assessments.
• Recognize and safely utilize attacker tools, TTPs.
• Develop comprehensive reports and executive-ready presentations.
• Advise clients on security remediations.

Skills

Pen testing

Red teaming

Threat analysis

Social engineering

Scripting

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience

Tools

Security testing tools

Job description

Google is seeking a security professional to join Mandiant’s Red Team within Google Cloud, delivering adversarial emulation engagements for large enterprises and developing social engineering campaigns. The role may involve building command and control infrastructure and conducting phishing simulations while evading detection by client security operations teams.

The position supports external and internal assessments and requires strong understanding of attacker tools, TTPs, and threat analysis.