Security Consultant, SIEM/SOAR

2 Days ago • 6 Years + • Cyber Security

Job Summary

Job Description

This Security Consultant role at Mandiant focuses on enabling technologies and tools within a Cyber Defense Center (CDC). Responsibilities include collaborating with cross-functional teams to define requirements and deliver recommendations for CDC technologies. Maintaining operational readiness of client SIEM systems, creating detection content, identifying areas for improvement, and configuring SIEM/response technologies for effective incident detection and response are key. The role also involves developing and supporting automation playbooks within a client's SOAR platform. The successful candidate will work within a technical team, administer information security technologies, learn emerging technologies, and be passionate about protecting customer data and assets.
Must have:
  • 6+ years Detection Engineering experience
  • SIEM/EDR/NDR experience
  • SOAR platform experience
  • Detection tuning and creation
  • Collaboration with stakeholders
  • SIEM log flow understanding
Good to have:
  • SPL, KQL, YARA-L experience
  • SIEM content engineering
  • PowerShell/Python scripting
  • Linux/network equipment logging knowledge

Job Details


Minimum qualifications:

  • Bachelor's degree in Computer Science, Information Systems, Cyber Security, related technical field, or equivalent practical experience.
  • 6 years of experience in a Detection Engineering or related role, working with EDR and SIEM technologies.
  • Experience using multiple operating systems, directory service software, and document, spreadsheet, and presentation software.
  • Experience with detection tuning and creation leveraging various security tools including SIEM, EDR, or NDR tools.
  • Experience with Security Orchestration and Automated Response (SOAR) platforms.

Preferred qualifications:

  • Experience with Search Processing Language (SPL), Kusto Query Language (KQL), YARA-L or similar SIEM query languages.
  • Experience with content engineering inside SIEM platforms (e.g., rule creation, advanced correlation searching, etc.).
  • Knowledge of scripting languages (e.g., PowerShell and Python).
  • Understanding of logging for common platforms and devices, including Linux and network equipment.
  • Understanding of SIEM log flow, aggregation, and forwarding.
  • Ability to engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

About the job

In this role, you will be responsible for enabling the technology and tools required to accomplish daily tasks within a Cyber Defense Center (CDC). You will collaborate with multiple cross-functional teams such as Security Architects, Security Analysts, Client Information Technology (IT) resources, and other business resource owners, to define requirements and deliver recommendations focused on technologies required to support the client's CDC. In addition, you will be responsible for maintaining the operational readiness of client Security Information and Event Management (SIEM), creating detection content, identifying areas for improvement, and setting appropriate configurations of the SIEM or related response technologies required for a client's Security Operations Center (SOC) to maintain effective incident detection and response capabilities. You will be developing and supporting automation playbooks within a client's Security Orchestration and Automated Response (SOAR) platform. You will work as a member of a technical team in a rapidly changing environment, administer a variety of information security technologies, learn new emerging technologies, and be passionate about protecting customer data and corporate assets from the threats facing multiple industries.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

  • Identify issues in customer cyber defense centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
  • Create and modify SIEM use cases and detection logic, leveraging cyber threat intelligence, written in technology-specific query language or sigma open signature format.
  • Provide expertise for SIEM and other SOC technologies that assist in incident response.
  • Measure and improve alert fidelity through metrics creation, tracking, responding to tuning requests, implementing incident-specific detection logic, etc.
  • Support development of automations and orchestration playbooks in client SOAR platforms.

Similar Jobs

Threat connect - Business Analyst, Risk Quantifier

Threat connect

(Remote)
22 Hours ago
Google - Security Consultant

Google

London, England, United Kingdom (On-Site)
1 Week ago
Google - Cyber Intelligence Instructor

Google

United Arab Emirates (On-Site)
2 Days ago
Trend Micro - Automotive Research Engineer - Threat Intelligence & Content Creation (VicOne)

Trend Micro

Taipei City, Taiwan (On-Site)
7 Months ago
Threat connect - Customer Success Engineer

Threat connect

(Remote)
1 Day ago
ByteDance - Security Expert, LLM-based Vulnerability Mining

ByteDance

Singapore (On-Site)
2 Weeks ago
SmileGate - Information Security: Security Solution Deployment and Operation

SmileGate

Seongnam-si, Gyeonggi-do, South Korea (On-Site)
2 Weeks ago
ION - IT Internal Auditor, Italy

ION

Italy (Hybrid)
6 Months ago
ByteDance - Research Scientist, Data Management and Security - Infrastructure System Lab

ByteDance

San Jose, California, United States (On-Site)
2 Weeks ago
PwC - Senior Associate - Risk Performance, Governance and Controls (RPGC)

PwC

Kuala Lumpur, Federal Territory Of Kuala Lumpur, Malaysia (On-Site)
6 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Crowd Strick - GSI Solution Architect

Crowd Strick

(Remote)
19 Hours ago
Google - Senior Validation Security Consultant

Google

Reston, Virginia, United States (On-Site)
2 Weeks ago
Redhorse Corp - SkillBridge Intern 2025

Redhorse Corp

Arlington, Virginia, United States (Hybrid)
7 Hours ago
Daxko - Manager, Security Operations & Engineering

Daxko

(Remote)
5 Days ago
Reversing Labs - Inside Sales Representative, EMEA

Reversing Labs

Ireland (Remote)
1 Month ago
Epic Games - Senior Manager, Offensive Security

Epic Games

(On-Site)
2 Weeks ago
Google - Operations Analyst, Pre-Sales Operations

Google

Singapore (On-Site)
1 Week ago
Google - Cyber Engagement Lead

Google

Tokyo, Japan (On-Site)
2 Weeks ago
Adobe - Senior Cyber Defense Analyst

Adobe

Sydney, New South Wales, Australia (On-Site)
1 Day ago
Google - Senior Digital Forensics Incident Response Consultant

Google

Los Angeles, California, United States (On-Site)
2 Weeks ago

Get notifed when new similar jobs are uploaded

Jobs in London, England, United Kingdom

Microsoft - Member of Technical Staff, AI Multimodal

Microsoft

London, England, United Kingdom (On-Site)
1 Month ago
Assystems - Process Engineer

Assystems

Blackburn, England, United Kingdom (On-Site)
6 Months ago
Climax Studios - Senior Level Designer

Climax Studios

England, United Kingdom (On-Site)
1 Month ago
Google - Software Engineer, Google Play

Google

London, England, United Kingdom (On-Site)
2 Weeks ago
Assystems - Risk Manager

Assystems

Bridgwater, England, United Kingdom (On-Site)
6 Months ago
Rebellion - Facilities and Administration Assistant

Rebellion

Oxford, England, United Kingdom (On-Site)
1 Month ago
Kwalee - Senior Growth Manager

Kwalee

Royal Leamington Spa, England, United Kingdom (On-Site)
1 Month ago
Hawk Eye Innovations - Logistics and Travel Coordinator (Tennis)

Hawk Eye Innovations

Basingstoke, England, United Kingdom (Hybrid)
1 Month ago
Lockwood - Data Scientist

Lockwood

Nottingham, England, United Kingdom (On-Site)
1 Day ago
Climax Studios - Experienced Level Designer

Climax Studios

Portsmouth, England, United Kingdom (On-Site)
1 Month ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

Google - Strategic Security Consultant

Google

Toronto, Ontario, Canada (On-Site)
2 Weeks ago
Google - Security Consultant

Google

London, England, United Kingdom (On-Site)
1 Week ago
ByteDance - Security Engineer, Security Assurance

ByteDance

Singapore (On-Site)
1 Month ago
Saviynt - Account Executive

Saviynt

Austin, Texas, United States (Remote)
6 Months ago
Netflix - Software Engineer (L5) - Security Platforms Engineering

Netflix

United States (Remote)
2 Weeks ago
USE Insider - Security Engineer - Red Team

USE Insider

Türkiye (Remote)
6 Months ago
PwC - IT Audit Senior Manager

PwC

Bangkok, Bangkok, Thailand (On-Site)
7 Months ago
Google - Data Center Security Manager, Compliance, Safety, and Risk Management

Google

Kuala Lumpur, Federal Territory Of Kuala Lumpur, Malaysia (On-Site)
2 Weeks ago
Larian Studios - Lead Security & Network Engineer

Larian Studios

Barcelona, Catalonia, Spain (On-Site)
1 Month ago

Get notifed when new similar jobs are uploaded

About The Company

A problem isn't truly solved until it's solved for all. Googlers build products that help create opportunities for everyone, whether down the street or across the globe. Bring your insight, imagination and a healthy disregard for the impossible. Bring everything that makes you unique. Together, we can build for everyone.

Mountain View, California, United States (On-Site)

Mountain View, California, United States (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

View All Jobs

Get notified when new jobs are added by Google

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug