Principal Incident Response Security Consultant, Mandiant, Google Cloud

Responsibilities

• Manage incident response engagements, compromise assessments, and threat-hunting operations with minimal guidance.
• Execute digital forensics, host-based live response, network traffic analysis, and static/dynamic malware analysis across cloud (GCP) and on-premise environments.
• Automate forensic tasks and build team utility tools using programming languages.
• Oversee the project lifecycle for multiple consulting engagements, including planning, budgeting, and quality control.
• Draft investigation reports and present technical findings clearly to client stakeholders, leadership, and external legal counsel.

Minimum qualifications:

Preferred qualifications:

• Experience managing enterprise systems or networks.
• Experience conducting threat hunting in various environments.
• Proficient with commercial and open source forensics suites such as XWays and TSK.
• Ability to communicate investigative findings and strategies to technical staff, executive leadership, legal counsel, and internal and external clients.
• Ability to quickly learn and use a new technology stack or platform.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 8 years of experience working end-to-end incident response investigations, analysis, or containment actions.
• 8 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
• Ability to travel up to 30%.