Security Consultant, SIEM/SOAR

23 Hours ago • 6 Years + • Cyber Security

Job Summary

Job Description

This Security Consultant role at Mandiant focuses on enabling technologies and tools within a Cyber Defense Center (CDC). Responsibilities include collaborating with cross-functional teams to define requirements and deliver recommendations for CDC technologies. Maintaining operational readiness of client SIEM systems, creating detection content, identifying areas for improvement, and configuring SIEM/response technologies for effective incident detection and response are key. The role also involves developing and supporting automation playbooks within a client's SOAR platform. The successful candidate will work within a technical team, administer information security technologies, learn emerging technologies, and be passionate about protecting customer data and assets.
Must have:
  • 6+ years Detection Engineering experience
  • SIEM/EDR/NDR experience
  • SOAR platform experience
  • Detection tuning and creation
  • Collaboration with stakeholders
  • SIEM log flow understanding
Good to have:
  • SPL, KQL, YARA-L experience
  • SIEM content engineering
  • PowerShell/Python scripting
  • Linux/network equipment logging knowledge

Job Details


Minimum qualifications:

  • Bachelor's degree in Computer Science, Information Systems, Cyber Security, related technical field, or equivalent practical experience.
  • 6 years of experience in a Detection Engineering or related role, working with EDR and SIEM technologies.
  • Experience using multiple operating systems, directory service software, and document, spreadsheet, and presentation software.
  • Experience with detection tuning and creation leveraging various security tools including SIEM, EDR, or NDR tools.
  • Experience with Security Orchestration and Automated Response (SOAR) platforms.

Preferred qualifications:

  • Experience with Search Processing Language (SPL), Kusto Query Language (KQL), YARA-L or similar SIEM query languages.
  • Experience with content engineering inside SIEM platforms (e.g., rule creation, advanced correlation searching, etc.).
  • Knowledge of scripting languages (e.g., PowerShell and Python).
  • Understanding of logging for common platforms and devices, including Linux and network equipment.
  • Understanding of SIEM log flow, aggregation, and forwarding.
  • Ability to engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

About the job

In this role, you will be responsible for enabling the technology and tools required to accomplish daily tasks within a Cyber Defense Center (CDC). You will collaborate with multiple cross-functional teams such as Security Architects, Security Analysts, Client Information Technology (IT) resources, and other business resource owners, to define requirements and deliver recommendations focused on technologies required to support the client's CDC. In addition, you will be responsible for maintaining the operational readiness of client Security Information and Event Management (SIEM), creating detection content, identifying areas for improvement, and setting appropriate configurations of the SIEM or related response technologies required for a client's Security Operations Center (SOC) to maintain effective incident detection and response capabilities. You will be developing and supporting automation playbooks within a client's Security Orchestration and Automated Response (SOAR) platform. You will work as a member of a technical team in a rapidly changing environment, administer a variety of information security technologies, learn new emerging technologies, and be passionate about protecting customer data and corporate assets from the threats facing multiple industries.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

  • Identify issues in customer cyber defense centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
  • Create and modify SIEM use cases and detection logic, leveraging cyber threat intelligence, written in technology-specific query language or sigma open signature format.
  • Provide expertise for SIEM and other SOC technologies that assist in incident response.
  • Measure and improve alert fidelity through metrics creation, tracking, responding to tuning requests, implementing incident-specific detection logic, etc.
  • Support development of automations and orchestration playbooks in client SOAR platforms.

Similar Jobs

Google - Account Lead, Mandiant Consulting

Google

Mumbai, Maharashtra, India (On-Site)
1 Day ago
Microsoft - Incident Response Engineer - CIRT

Microsoft

Sydney, New South Wales, Australia (Remote)
1 Week ago
PwC - Forensics - Threat Intelligence Analyst  - Deals

PwC

Amman, Amman Governorate, Jordan (On-Site)
6 Months ago
Google - Software Engineer III, Frontend, GTI, Google Cloud

Google

Málaga, Andalusia, Spain (On-Site)
1 Week ago
ByteDance - Threat Intelligence Engineer, Security Assurance - 2025 Start

ByteDance

Singapore (On-Site)
5 Months ago
ION - Cyber Security Analyst, Italy

ION

Milan, Lombardy, Italy (On-Site)
6 Months ago
PwC - Senior Experimentado- Business Analyst

PwC

Buenos Aires, Buenos Aires, Argentina (On-Site)
6 Months ago
Google - Security Engineering Manager, Cloud Red Team, Cloud CISO

Google

New York, New York, United States (On-Site)
1 Week ago
undefined - Senior Application Security Engineer

Hyderabad, Telangana, India (On-Site)
6 Months ago
Fortis Games - Senior Cloud Security Engineer

Fortis Games

Hungary (On-Site)
2 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Google - Cyber Security Intelligence Instructor

Google

United Arab Emirates (On-Site)
1 Week ago
ByteDance - Security Engineer, Security Assurance

ByteDance

Singapore (On-Site)
1 Month ago
PwC - Security Operations Center and Incident Response Manager

PwC

Makati, Metro Manila, Philippines (On-Site)
7 Months ago
Google - Principal Strategic Security Consultant

Google

Alberta, Canada (Remote)
1 Week ago
Google - Software Engineer III, Google Threat Intelligence, Google Cloud Platform

Google

Málaga, Andalusia, Spain (On-Site)
1 Week ago
Google - Strategic Security Consultant

Google

Toronto, Ontario, Canada (On-Site)
1 Day ago
Google - Security Consultant

Google

London, England, United Kingdom (On-Site)
1 Week ago
Google - Cyber Intelligence Instructor

Google

United Arab Emirates (On-Site)
1 Week ago
Varonis  - Security Operations Center (SOC) Expert

Varonis

Morrisville, North Carolina, United States (On-Site)
5 Months ago
ByteDance - Threat Intelligence Engineer, Security Assurance

ByteDance

Singapore (On-Site)
5 Months ago

Get notifed when new similar jobs are uploaded

Jobs in London, England, United Kingdom

People Can Fly - Senior Backend Programmer

People Can Fly

Gateshead, England, United Kingdom (Remote)
1 Week ago
Kwalee - Business Analyst

Kwalee

Royal Leamington Spa, England, United Kingdom (On-Site)
1 Month ago
Double Eleven - Associate Lead Programmer (C++ / Proprietary Engine)

Double Eleven

Middlesbrough, England, United Kingdom (Hybrid)
1 Month ago
Gunzilla - Senior Technical Animator

Gunzilla

London, England, United Kingdom (On-Site)
1 Month ago
Epic Games - Technical Account Manager

Epic Games

London, England, United Kingdom (On-Site)
2 Months ago
Activision - Expert Animator

Activision

London, England, United Kingdom (Hybrid)
4 Months ago
Bally's Interactive - Treasury Operations and Systems Manager

Bally's Interactive

Manchester, England, United Kingdom (On-Site)
1 Week ago
Epic Games - Vendor Manager, Trust & Safety

Epic Games

London, England, United Kingdom (On-Site)
1 Month ago
Overwolf - Brand Partnerships Director - UK

Overwolf

London, England, United Kingdom (On-Site)
9 Months ago
Rocket Science - Producer (Technical Account Manager)

Rocket Science

Wales, United Kingdom (Hybrid)
1 Month ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

Google - Software Engineer III, Google Threat Intelligence, Google Cloud Platform

Google

Málaga, Andalusia, Spain (On-Site)
1 Week ago
ByteDance - Security Software Engineer

ByteDance

Singapore (On-Site)
2 Weeks ago
ByteDance - Senior Software Engineer, Anti-DDoS

ByteDance

Singapore (On-Site)
3 Months ago
CloudLinux - Senior Go Developer for Imunify360

CloudLinux

Masovian Voivodeship, Poland (Remote)
1 Month ago
Google - Software Engineer III, Security/Privacy, Google Cloud

Google

Sunnyvale, California, United States (On-Site)
23 Hours ago
ION - Network Security Engineer

ION

Rome, Lazio, Italy (Hybrid)
6 Months ago
Google - Security Response Engineer

Google

Sunnyvale, California, United States (On-Site)
1 Week ago
Krafton  - Senior Security Engineer

Krafton

Seoul, South Korea (On-Site)
1 Month ago
ION - Cyber Security Analyst, Italy

ION

Pisa, Tuscany, Italy (On-Site)
6 Months ago
ByteDance - Cloud Security Solution Architect, APAC

ByteDance

Singapore (On-Site)
5 Months ago

Get notifed when new similar jobs are uploaded

About The Company

A problem isn't truly solved until it's solved for all. Googlers build products that help create opportunities for everyone, whether down the street or across the globe. Bring your insight, imagination and a healthy disregard for the impossible. Bring everything that makes you unique. Together, we can build for everyone.

Dublin, County Dublin, Ireland (On-Site)

New York, New York, United States (On-Site)

Waterloo, Ontario, Canada (On-Site)

Taipei City, Taiwan (On-Site)

San Francisco, California, United States (On-Site)

Saint-Ghislain, Wallonia, Belgium (On-Site)

Bengaluru, Karnataka, India (On-Site)

Austin, Texas, United States (On-Site)

View All Jobs

Get notified when new jobs are added by Google

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug