Senior Incident Response Security Consultant, Mandiant, Google Cloud
Google· Mandiant, Google Cloud
Remote$138k - $200kFull-timePosted 3mo ago
About the role
Incident response consultant role focusing on end-to-end incident response investigations, containment, remediation, threat hunting, and client-facing engagements within Google Cloud's Mandiant practice.
Responsibilities
- Collaborate with internal and customer teams to investigate and contain incidents.
- Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) for current and future investigations.
- Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
- Lead client-facing incident response engagements, examining cloud, endpoint, and network-based sources of evidence.
- Develop comprehensive and accurate reports and presentations for technical and executive audiences; communicate findings and strategy with internal stakeholders.
Qualifications
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
- 5 years of experience working end-to-end incident response investigations, analysis, or containment actions.
- 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
- Ability to travel up to 30% of the time.
Skills
Required:Incident responseForensics (host, network, cloud)Communication with stakeholders
Benefits
- 15% bonus target + equity + benefits (US)
Last updated Oct 23, 2026. Interested? Apply on the company site.
More open roles at Google
- Staff Network Security Engineer, Google Enterprise Network2d agoHybrid (Austin, TX; Sunnyvale, CA)
- Group Product Manager, Google Lens AI Shopping2d agoMountain View, CA, USA · Product Management
- UX Program Manager2d agoHybrid (New York, NY; San Bruno, CA) · UX Programs & Operations
- Senior Staff Software Engineer, Android Automotive OS2d agoHybrid (Kraków, Poland; Munich, Germany)
- 2d ago