Security Consultant

1 Month ago • 6 Years + • Cyber Security

Job Summary

Job Description

As a Security Consultant at Mandiant, you'll enable technology and tools for a Cyber Defense Center (CDC). You'll collaborate with cross-functional teams to define requirements and deliver recommendations for technologies supporting the client's CDC. Responsibilities include maintaining SIEM operational readiness, creating detection content, identifying areas for improvement, and configuring SIEM/related response technologies for effective incident detection and response. You'll also develop and support automation playbooks in the client's SOAR platform. This role requires working within a rapidly changing environment, administering various information security technologies, and learning new technologies while protecting customer data and corporate assets.
Must have:
  • Bachelor's degree in relevant field or experience
  • 6+ years in Detection Engineering or related role
  • Experience with EDR, SIEM, and SOAR technologies
  • Detection tuning and creation expertise
  • Collaboration with stakeholders
Good to have:
  • Experience with SPL, KQL, YARA-L
  • SIEM content engineering experience
  • Scripting languages (PowerShell, Python)
  • Understanding of SIEM log flow
  • Linux and network equipment logging knowledge

Job Details


Minimum qualifications:

  • Bachelor's degree in Computer Science, Information Systems, Cyber Security, related technical field, or equivalent practical experience.
  • 6 years of experience in a Detection Engineering or related role, working with EDR and SIEM technologies.
  • Experience using multiple operating systems, directory service software, and document, spreadsheet, and presentation software.
  • Experience with detection tuning and creation leveraging various security tools including SIEM, EDR, or NDR tools.
  • Experience with Security Orchestration and Automated Response (SOAR) platforms.

Preferred qualifications:

  • Experience with Search Processing Language (SPL), Kusto Query Language (KQL), YARA-L or similar SIEM query languages.
  • Experience with content engineering inside SIEM platforms (e.g., rule creation, advanced correlation searching, etc.).
  • Knowledge of scripting languages (e.g., PowerShell and Python).
  • Understanding of logging for common platforms and devices, including Linux and network equipment.
  • Understanding of SIEM log flow, aggregation, and forwarding.
  • Ability to engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

About the job

In this role, you will be responsible for enabling the technology and tools required to accomplish daily tasks within a Cyber Defense Center (CDC). You will collaborate with multiple cross-functional teams such as Security Architects, Security Analysts, Client Information Technology (IT) resources, and other business resource owners, to define requirements and deliver recommendations focused on technologies required to support the client's CDC. In addition, you will be responsible for maintaining the operational readiness of client Security Information and Event Management (SIEM), creating detection content, identifying areas for improvement, and setting appropriate configurations of the SIEM or related response technologies required for a client's Security Operations Center (SOC) to maintain effective incident detection and response capabilities. You will be developing and supporting automation playbooks within a client's Security Orchestration and Automated Response (SOAR) platform. You will work as a member of a technical team in a rapidly changing environment, administer a variety of information security technologies, learn new emerging technologies, and be passionate about protecting customer data and corporate assets from the threats facing multiple industries.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

  • Identify issues in customer cyber defense centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
  • Create and modify SIEM use cases and detection logic, leveraging cyber threat intelligence, written in technology-specific query language or sigma open signature format.
  • Provide expertise for SIEM and other SOC technologies that assist in incident response.
  • Measure and improve alert fidelity through metrics creation, tracking, responding to tuning requests, implementing incident-specific detection logic, etc.
  • Support development of automations and orchestration playbooks in client SOAR platforms.

Similar Jobs

Threat connect - Business Analyst

Threat connect

(Remote)
3 Weeks ago
Threat connect - Senior Java Engineer

Threat connect

(Remote)
1 Month ago
Redhorse Corp - SkillBridge Intern 2025

Redhorse Corp

Arlington, Virginia, United States (Hybrid)
1 Month ago
Threat connect - Business Analyst, Risk Quantifier

Threat connect

(Remote)
1 Month ago
Ziff Davis - QA Engineer

Ziff Davis

(Remote)
1 Month ago
PwC - ETIC, Cyber Security Cyber Risk - Associate

PwC

Cairo, Cairo Governorate, Egypt (On-Site)
8 Months ago
SmileGate - Security Threat and Incident Analysis

SmileGate

Seongnam-si, Gyeonggi-do, South Korea (On-Site)
2 Months ago
ByteDance - Threat Intelligence Engineer, Security Assurance

ByteDance

Singapore (On-Site)
6 Months ago
PwC - Financial Services GRC Senior Associate

PwC

Makati, Metro Manila, Philippines (On-Site)
8 Months ago
Trend Micro - (Sr.) Cloud Developer (Vision One)

Trend Micro

Taipei City, Taiwan (On-Site)
8 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Ziff Davis - Software Developer

Ziff Davis

(Remote)
1 Month ago
Plarium - SecOps Engineer

Plarium

Herzliya, Tel Aviv District, Israel (On-Site)
1 Month ago
ByteDance - Security Engineer, Security Assurance

ByteDance

Singapore (On-Site)
2 Months ago
Crowd Strick - Sr. Cloud Threat Detections Engineer

Crowd Strick

Tel Aviv-Yafo, Tel Aviv District, Israel (On-Site)
3 Weeks ago
Springer Group - Security Operations Analyst

Springer Group

Pune, Maharashtra, India (Hybrid)
3 Weeks ago
Canonical - Staff Security Operations Engineer

Canonical

(Remote)
1 Month ago
Cadence - Senior Cybersecurity Engineer

Cadence

San Jose, California, United States (On-Site)
1 Month ago
Interactive Brokers - Manager Incident Response and Threat Intelligence

Interactive Brokers

Mumbai, Maharashtra, India (Hybrid)
1 Month ago
Google - Strategic Security Consultant

Google

Toronto, Ontario, Canada (On-Site)
1 Month ago

Get notifed when new similar jobs are uploaded

Jobs in London, England, United Kingdom

Fuse Games - Distributed Development Artist

Fuse Games

Guildford, England, United Kingdom (Hybrid)
2 Months ago
Aristocrat Gaming - Director, Post Merger Integration

Aristocrat Gaming

London, England, United Kingdom (Hybrid)
1 Month ago
Square Enix - Assistant Online Community Manager - German

Square Enix

London, England, United Kingdom (Hybrid)
2 Months ago
Playtech - Executive Assistant

Playtech

London, England, United Kingdom (On-Site)
1 Month ago
Lighthouse Games - Head of Development

Lighthouse Games

England, United Kingdom (Hybrid)
2 Months ago
Whatnot - Account Executive (German Speaking)

Whatnot

London, England, United Kingdom (On-Site)
1 Month ago
Double Eleven - Senior Network Programmer

Double Eleven

Middlesbrough, England, United Kingdom (Hybrid)
2 Months ago
PlayStation Global - Staff HRIS Analyst: Talent Management & Workday

PlayStation Global

London, England, United Kingdom (On-Site)
2 Months ago
Homa games - Director of Product, Hybridcasual

Homa games

United Kingdom (Remote)
2 Months ago
Every matrix - Experienced CRM Data Scientist

Every matrix

United Kingdom (Hybrid)
7 Months ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

OpenText - Software Security Research

OpenText

Bengaluru, Karnataka, India (On-Site)
8 Months ago
ByteDance - Security Engineer, Anti-DDoS

ByteDance

Singapore (On-Site)
2 Months ago
ION - Cyber Security Analyst, Italy

ION

Pisa, Tuscany, Italy (On-Site)
7 Months ago
Trend Micro - Embedded Software Engineer (C/C++)

Trend Micro

Manila, Metro Manila, Philippines (On-Site)
16 Years ago
Varonis  - Cloud Security Architect

Varonis

United States (Remote)
3 Months ago
Larian Studios - Lead Security & Network Engineer

Larian Studios

Guildford, England, United Kingdom (On-Site)
3 Months ago
ByteDance - Cloud Security Solution Architect, APAC

ByteDance

Singapore (On-Site)
7 Months ago
ByteDance - Executive Protection Specialist

ByteDance

Singapore (On-Site)
2 Months ago
The Walt Disney Company - SIP Content Security Senior Analyst

The Walt Disney Company

Glendale, California, United States (On-Site)
1 Month ago
PwC - Assurance Technology Risk & Quality Manager

PwC

Dublin, County Dublin, Ireland (On-Site)
7 Months ago

Get notifed when new similar jobs are uploaded

About The Company

London, England, United Kingdom (On-Site)

Bengaluru, Karnataka, India (On-Site)

Mountain View, California, United States (On-Site)

Bengaluru, Karnataka, India (On-Site)

Taipei City, Taiwan (On-Site)

Zürich, Zurich, Switzerland (On-Site)

Kirkland, Washington, United States (On-Site)

New Taipei, New Taipei City, Taiwan (On-Site)

Seattle, Washington, United States (On-Site)

View All Jobs

Get notified when new jobs are added by Google

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug