[Remote] Senior Incident Response Consultant, Mandiant, Google Cloud

Note: The job is a remote job and is open to candidates in USA. Google’s Mandiant team provides incident response and cybersecurity services to help organizations detect and respond to threats and reduce business risk. The Senior Incident Response Consultant investigates and contains complex incidents, performs forensic analysis and threat hunting, and communicates findings to client teams and executive leadership.

Responsibilities

• Collaborate with internal and customer teams to investigate and contain cyber security incidents
• Lead client-facing incident response investigations across cloud, endpoint, and network environments
• Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations
• Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) to build investigative scripts, tools, and methodologies
• Develop and present comprehensive reports and briefings on technical findings to both technical teams and executive leadership

Skills

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience
• 5 years of experience working end-to-end incident response investigations, analysis, or containment actions
• 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics
• Certifications in cloud platforms or industry digital forensics and incident response (e.g., SANS GCFA, GCFE, GCIH, or equivalent)
• Experience in security competitions, Capture the Flags (CTFs), or platforms such as Hack The Box, TryHackMe, or OverTheWire
• Experience communicating investigative findings and technical strategies to executive leadership, legal counsel, and clients
• Experience leading client-facing incident response engagements, managing project deliverables, or mentoring consultants
• Excellent time and project management skills
• Active attendance at major cybersecurity conferences (e.g., Black Hat, DEF CON, etc.)

Benefits

• 15% bonus target
• Equity
• Remote work is available in Alabama, Connecticut, District of Columbia, Delaware, Florida, Georgia, Kentucky, Massachusetts, Maryland, Maine, North Carolina, New Hampshire, New Jersey, New York, Pennsylvania, Rhode Island, South Carolina, Tennessee, Virginia, and Vermont.

Company Overview

Company H1B Sponsorship