STS Security Engineer, Consultant, Mandiant, Google Cloud

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, a related technical field, or equivalent practical experience.
• 3 years of experience in data analytics to include metrics and reporting or business intelligence.
• 3 years of experience in writing reports for executive leadership and technical audiences to communicate findings, assessments, and recommendations.
• 1 year of experience working with cyber defense teams in an operational environment such as SOC/CIRT, Cyber Threat Intelligence, or Blue Team.
• Experience in scripting (e.g., Python).

Preferred qualifications:

• Certifications such as CompTIA Security+, CompTIA Network+, CISCO (CCNA), ISC2 (CISSP), or SANS (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN).
• Knowledge of scripting languages (e.g., Python) and data science tools and technologies.
• Understanding of cyber defense operations to include the incident response, containment, and remediation process, cyber threat intelligence, or security architecture.
• Understanding of security controls for common platforms and devices, including Windows, Linux and network equipment.
• Excellent communication, and people-management skills.

About the job: The Security Transformation Services (STS) Security Engineer Consultant is responsible for building, maintaining, and enabling the technologies, tools, data sets, and appropriate metrics to provide actionable, timely, and relevant operational and tactical reporting that drive cyber defense initiatives. The Security Engineer will collaborate with multiple cross-functional teams like Mandiant Architects, Mandiant Analysts, client Information Technology (IT) resources, and other business resource owners, to define requirements and deliver recommendations focused on operations required to support the client's Cyber Defense Center (CDC). In addition, the Security Engineer may be responsible for building and maintaining reporting dashboards and operational metrics and communicating key areas of improvement to enhance the client’s overall CDC capabilities. In this role, you will be working as a member of a technical team in a fluid environment and will be experienced in administering a variety of information security technologies, excited to learn new emerging technologies, and passionate about protecting customer data and corporate assets from the threats facing multiple industries. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone. The US base salary range for this full-time position is $108,000-$155,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process. Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google .

Responsibilities:

• Leverage and utilize various investigative tools and platforms to synthesize disparate data sources.
• Provide expertise in data analytics to drive operational and tactical metrics and reporting to improve cyber defense capabilities. Articulate findings that are relevant, actionable, and timely to drive cyber defense initiatives.
• Develop dashboards, problem-solving methodologies, and key outputs within Security Information and Event Management (SIEM), business intelligence, and other reporting tools.
• Leverage and operationalize threat intelligence across cyber defense functions to address key threats to the organization.
• Engage and collaborate with client stakeholders and other groups within customer environments to drive resolution for security issues.