Lead and contribute to complex client‑facing incident response investigations, providing forensic analysis, threat hunting, and malware triage across cloud, endpoint, and network environments.
Lead small and contribute to complex client‑facing investigations and examine cloud, endpoint, and network‑based sources of forensic evidence.
Collaborate with internal and customer teams to investigate and contain incidents.
Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs); build scripts, tools, or methodologies to enhance Mandiant’s incident investigation processes.
Develop and present comprehensive and accurate reports and presentations for both technical and executive audiences.
Requirements
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
Nice to have: Certifications in cloud platforms
Nice to have: Experience in security competitions, Capture the Flags (CTFs) or testing platforms such as Hack the Box, TryHackMe, Overthewire
Lead and mentor incident response engagements for Mandiant clients, focusing on cloud, endpoint, and network forensics, while managing large client-facing projects and training teams.
Responsibilities
Lead large and complex, client-facing incident response engagements
Examine cloud, endpoint, and network-based sources of evidence
Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs)
Build scripts, tools, or methodologies to enhance incident investigation processes
Develop and present comprehensive and accurate reports, trainings, and presentations
Requirements
Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience
Senior Incident Response ConsultantNewGoogle · Remote, US+1 more