Security Consultant

2 Weeks ago • 6 Years + • Cyber Security

Job Summary

Job Description

As a Security Consultant at Mandiant, you'll enable technology and tools for a Cyber Defense Center (CDC). You'll collaborate with cross-functional teams to define requirements and deliver recommendations for technologies supporting the client's CDC. Responsibilities include maintaining SIEM operational readiness, creating detection content, identifying areas for improvement, and configuring SIEM/related response technologies for effective incident detection and response. You'll also develop and support automation playbooks in the client's SOAR platform. This role requires working within a rapidly changing environment, administering various information security technologies, and learning new technologies while protecting customer data and corporate assets.
Must have:
  • Bachelor's degree in relevant field or experience
  • 6+ years in Detection Engineering or related role
  • Experience with EDR, SIEM, and SOAR technologies
  • Detection tuning and creation expertise
  • Collaboration with stakeholders
Good to have:
  • Experience with SPL, KQL, YARA-L
  • SIEM content engineering experience
  • Scripting languages (PowerShell, Python)
  • Understanding of SIEM log flow
  • Linux and network equipment logging knowledge

Job Details


Minimum qualifications:

  • Bachelor's degree in Computer Science, Information Systems, Cyber Security, related technical field, or equivalent practical experience.
  • 6 years of experience in a Detection Engineering or related role, working with EDR and SIEM technologies.
  • Experience using multiple operating systems, directory service software, and document, spreadsheet, and presentation software.
  • Experience with detection tuning and creation leveraging various security tools including SIEM, EDR, or NDR tools.
  • Experience with Security Orchestration and Automated Response (SOAR) platforms.

Preferred qualifications:

  • Experience with Search Processing Language (SPL), Kusto Query Language (KQL), YARA-L or similar SIEM query languages.
  • Experience with content engineering inside SIEM platforms (e.g., rule creation, advanced correlation searching, etc.).
  • Knowledge of scripting languages (e.g., PowerShell and Python).
  • Understanding of logging for common platforms and devices, including Linux and network equipment.
  • Understanding of SIEM log flow, aggregation, and forwarding.
  • Ability to engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

About the job

In this role, you will be responsible for enabling the technology and tools required to accomplish daily tasks within a Cyber Defense Center (CDC). You will collaborate with multiple cross-functional teams such as Security Architects, Security Analysts, Client Information Technology (IT) resources, and other business resource owners, to define requirements and deliver recommendations focused on technologies required to support the client's CDC. In addition, you will be responsible for maintaining the operational readiness of client Security Information and Event Management (SIEM), creating detection content, identifying areas for improvement, and setting appropriate configurations of the SIEM or related response technologies required for a client's Security Operations Center (SOC) to maintain effective incident detection and response capabilities. You will be developing and supporting automation playbooks within a client's Security Orchestration and Automated Response (SOAR) platform. You will work as a member of a technical team in a rapidly changing environment, administer a variety of information security technologies, learn new emerging technologies, and be passionate about protecting customer data and corporate assets from the threats facing multiple industries.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

  • Identify issues in customer cyber defense centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
  • Create and modify SIEM use cases and detection logic, leveraging cyber threat intelligence, written in technology-specific query language or sigma open signature format.
  • Provide expertise for SIEM and other SOC technologies that assist in incident response.
  • Measure and improve alert fidelity through metrics creation, tracking, responding to tuning requests, implementing incident-specific detection logic, etc.
  • Support development of automations and orchestration playbooks in client SOAR platforms.

Similar Jobs

Google - Strategic Security Consultant

Google

Toronto, Ontario, Canada (On-Site)
1 Week ago
Crowd Strick - GSI Solution Architect

Crowd Strick

(Remote)
19 Hours ago
ByteDance - Senior Security Tech Lead Manager - Security Engineering

ByteDance

San Jose, California, United States (On-Site)
2 Weeks ago
ION - Markets Product Security Engineer - UK

ION

London, England, United Kingdom (On-Site)
6 Months ago
Google - Senior Validation Security Consultant

Google

Reston, Virginia, United States (On-Site)
2 Days ago
ByteDance - Security Operations Manager - Jakarta

ByteDance

Jakarta, Jakarta, Indonesia (On-Site)
2 Weeks ago
ByteDance - Technical Account Manager (Edge Cloud)

ByteDance

San Jose, California, United States (On-Site)
2 Weeks ago
PwC - Senior Associate - Risk Performance, Governance and Controls (RPGC)

PwC

Kuala Lumpur, Federal Territory Of Kuala Lumpur, Malaysia (On-Site)
6 Months ago
PwC - IN-Senior Associate_SmartCitiesGIS _Cities_Advisory _Ahmedabad/Mumbai/Delhi

PwC

Ahmedabad, Gujarat, India (On-Site)
4 Months ago
PwC - Cybersecurity Threat & Vulnerability | Manager | Cyber Security | Technology Consulting

PwC

Dublin, County Dublin, Ireland (On-Site)
6 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Google - Regional Security Architect, Security Operations, Public Sector

Google

Reston, Virginia, United States (On-Site)
1 Week ago
Google - Senior Security Analyst, Cloud Threat Detection

Google

Dublin, County Dublin, Ireland (On-Site)
2 Weeks ago
Google - Senior Strategic Security Consultant (Government)

Google

Brussels, Brussels, Belgium (On-Site)
2 Weeks ago
Google - Strategic Security Consultant

Google

Toronto, Ontario, Canada (On-Site)
2 Weeks ago
Google - Security Consultant

Google

London, England, United Kingdom (On-Site)
1 Week ago
Axon - Senior Security Operations Engineer II

Axon

Seattle, Washington, United States (Hybrid)
7 Hours ago
Netflix - Security Engineer L5, Incident Response

Netflix

Warsaw, Masovian Voivodeship, Poland (On-Site)
2 Months ago
ByteDance - Software Engineer Intern, Security Engineering

ByteDance

Singapore (On-Site)
2 Weeks ago
Netflix - Security Engineer L5, Incident Response

Netflix

Poland (Remote)
2 Weeks ago

Get notifed when new similar jobs are uploaded

Jobs in London, England, United Kingdom

Zscaler - Sales Development Representative MEA

Zscaler

London, England, United Kingdom (On-Site)
8 Hours ago
PlayStation Global - Lead Engineer, APIs & Services

PlayStation Global

London, England, United Kingdom (On-Site)
1 Week ago
Scopely - Principal DevOps Engineer - Star Trek Fleet Command

Scopely

United Kingdom (Remote)
1 Month ago
Outbrain - Marketing and Events Coordinator

Outbrain

London, England, United Kingdom (Hybrid)
23 Hours ago
Corsair - Sales Operations Representative

Corsair

Wokingham, England, United Kingdom (On-Site)
1 Month ago
Canva - Field Solutions Lead (Flourish)

Canva

London, England, United Kingdom (Remote)
2 Weeks ago
Jane Street - Mobility/MDM Engineer

Jane Street

London, England, United Kingdom (On-Site)
6 Hours ago
Lockwood - Senior Producer

Lockwood

Nottingham, England, United Kingdom (On-Site)
23 Hours ago
Tesla - Customer Experience Specialist, Sales - London (Part Time)

Tesla

London, England, United Kingdom (On-Site)
2 Months ago
Tesla - Service Technician / Automotive Mechanic

Tesla

Wolverhampton, England, United Kingdom (On-Site)
2 Months ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

ARHS - Application Security Expert

ARHS

Amsterdam, North Holland, Netherlands (On-Site)
6 Months ago
Google - Senior Validation Security Consultant

Google

Reston, Virginia, United States (On-Site)
2 Weeks ago
Zazz - Cybersecurity Analyst

Zazz

(Remote)
2 Months ago
PwC - Consultant expérimenté cybersécurité | CDI | H/F

PwC

Neuilly-sur-Seine, Île-de-France, France (On-Site)
7 Months ago
Google - Security Sales Specialist, Threat Intelligence, North Asia

Google

Taipei City, Taiwan (On-Site)
2 Days ago
Google - Customer Engineer, Google Cloud Security

Google

Taipei City, Taiwan (On-Site)
2 Days ago
Epic Games - Senior Game Security Engineer - Asset Integrity

Epic Games

Cary, North Carolina, United States (On-Site)
2 Weeks ago
ByteDance - Backend Engineer(Distributed System) - Network Security - San Jose

ByteDance

San Jose, California, United States (On-Site)
6 Months ago
Sphere Entertainment Co - Security Supervisor and Driver

Sphere Entertainment Co

Burbank, California, United States (On-Site)
1 Month ago
Sporty Group - Information Security Engineer

Sporty Group

(Remote)
9 Months ago

Get notifed when new similar jobs are uploaded

About The Company

A problem isn't truly solved until it's solved for all. Googlers build products that help create opportunities for everyone, whether down the street or across the globe. Bring your insight, imagination and a healthy disregard for the impossible. Bring everything that makes you unique. Together, we can build for everyone.

Mountain View, California, United States (On-Site)

Mountain View, California, United States (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

View All Jobs

Get notified when new jobs are added by Google

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug