SOAR Security Consultant: Cyber Defense & Automation

Google Inc.; Austin (TX); Hybrid; USD 112,000 - 161,000; Full time

Job summary

Google Austin, TX, USA is seeking a Security Consultant specializing in SOAR within Mandiant and Google Cloud. You will enable automation and orchestration across the Cyber Defense Center, collaborating with Mandiant Architects, Analysts, and client IT teams to define requirements and deliver playbooks and improvements.

We value a mid-level professional with a bachelor’s in CS/Info Systems/Cybersecurity, 3 years in SOAR and incident response, plus experience with SIEMs and API integrations.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 3 years of experience configuring and maintaining SOAR technologies in security engineering, system administration, or similar roles.
• 3 years of experience with SOC/CSIRT or incident response teams.
• Experience with SIEM solutions (writing queries, searches, alerts, dashboards).

Responsibilities

• Identify issues in client CDCs, plan improvements, and oversee implementation to completion.
• Advise on technologies used by the client CDC, CSIRT, and SOC.
• Provide expertise for SOAR and SOC technologies in incident response.
• Create and modify SOAR playbooks written in Python.
• Collaborate with client stakeholders to drive resolution of security issues.

Skills

SOAR

SOC/CSIRT

SIEM

Python

Education

Bachelor's degree in CS/Info Systems/Cybersecurity

Tools

SOAR platforms

API integration

Job description

Google Austin, TX, USA is seeking a Security Consultant specializing in SOAR within Mandiant and Google Cloud. You will enable automation and orchestration across the Cyber Defense Center, collaborating with Mandiant Architects, Analysts, and client IT teams to define requirements and deliver playbooks and improvements.

We value a mid-level professional with a bachelor’s in CS/Info Systems/Cybersecurity, 3 years in SOAR and incident response, plus experience with SIEMs and API integrations.