[Remote] Principal Incident Response Security Consultant, Mandiant, Google Cloud

Note: The job is a remote job and is open to candidates in USA. Google Cloud’s Mandiant provides incident response and cybersecurity consulting services to help organizations detect and respond to threats and reduce business risk. The Principal Incident Response Security Consultant leads investigations, containment, remediation, threat hunting, and forensic analysis for complex client incidents.

Responsibilities

• Manage incident response engagements, compromise assessments, and threat-hunting operations with minimal guidance
• Execute digital forensics, host-based live response, network traffic analysis, and static/dynamic malware analysis across cloud (GCP) and on-premise environments
• Automate forensic tasks and build team utility tools using programming languages
• Oversee the project lifecycle for multiple consulting engagements, including planning, budgeting, and quality control
• Draft investigation reports and present technical findings clearly to client stakeholders, leadership, and external legal counsel

Skills

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience
• 8 years of experience working end-to-end incident response investigations, analysis, or containment actions
• 8 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics
• Experience managing enterprise systems or networks
• Experience conducting threat hunting in various environments
• Proficient with commercial and open source forensics suites such as XWays and TSK
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, legal counsel, and internal and external clients
• Ability to quickly learn and use a new technology stack or platform

Benefits

• Health, dental, vision, life, disability insurance
• 401(k) with company match
• 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment
• 40 hours/year sick time (increased to 69 hours/year for Seattle), including 5 discretionary sick days per instance
• Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks
• Baby Bonding Leave: 18 weeks
• 13 paid holidays per year
• 20% bonus target
• Equity

Company Overview

Company H1B Sponsorship