Security Consultant

1 Week ago • 6 Years + • Cyber Security

Job Summary

Job Description

As a Security Consultant at Mandiant, you'll be instrumental in enabling the technology and tools for a Cyber Defense Center (CDC). Collaborating with cross-functional teams, you'll define requirements and deliver recommendations for technologies supporting the client's CDC. Responsibilities include maintaining SIEM operational readiness, creating detection content, identifying areas for improvement, configuring SIEM/related response technologies for effective incident detection and response, and developing/supporting automation playbooks within the client's SOAR platform. You'll work in a fast-paced environment, administering various information security technologies, learning emerging technologies, and protecting customer data and corporate assets.
Must have:
  • 6+ years in Detection Engineering or related role
  • Experience with EDR and SIEM technologies
  • SIEM detection tuning and content creation
  • SOAR platform experience
  • Collaboration with client stakeholders
Good to have:
  • SPL, KQL, YARA-L or similar SIEM query languages
  • SIEM content engineering (rule creation, correlation)
  • PowerShell and Python scripting
  • Understanding of SIEM log flow and aggregation

Job Details


Minimum qualifications:

  • Bachelor's degree in Computer Science, Information Systems, Cyber Security, related technical field, or equivalent practical experience.
  • 6 years of experience in a Detection Engineering or related role, working with EDR and SIEM technologies.
  • Experience using multiple operating systems, directory service software, and document, spreadsheet, and presentation software.
  • Experience with detection tuning and creation leveraging various security tools including SIEM, EDR, or NDR tools.
  • Experience with Security Orchestration and Automated Response (SOAR) platforms.

Preferred qualifications:

  • Experience with Search Processing Language (SPL), Kusto Query Language (KQL), YARA-L or similar SIEM query languages.
  • Experience with content engineering inside SIEM platforms (e.g., rule creation, advanced correlation searching, etc.).
  • Knowledge of scripting languages (e.g., PowerShell and Python).
  • Understanding of logging for common platforms and devices, including Linux and network equipment.
  • Understanding of SIEM log flow, aggregation, and forwarding.
  • Ability to engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

About the job

In this role, you will be responsible for enabling the technology and tools required to accomplish daily tasks within a Cyber Defense Center (CDC). You will collaborate with multiple cross-functional teams such as Security Architects, Security Analysts, Client Information Technology (IT) resources, and other business resource owners, to define requirements and deliver recommendations focused on technologies required to support the client's CDC. In addition, you will be responsible for maintaining the operational readiness of client Security Information and Event Management (SIEM), creating detection content, identifying areas for improvement, and setting appropriate configurations of the SIEM or related response technologies required for a client's Security Operations Center (SOC) to maintain effective incident detection and response capabilities. You will be developing and supporting automation playbooks within a client's Security Orchestration and Automated Response (SOAR) platform. You will work as a member of a technical team in a rapidly changing environment, administer a variety of information security technologies, learn new emerging technologies, and be passionate about protecting customer data and corporate assets from the threats facing multiple industries.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

  • Identify issues in customer cyber defense centers and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
  • Create and modify SIEM use cases and detection logic, leveraging cyber threat intelligence, written in technology-specific query language or sigma open signature format.
  • Provide expertise for SIEM and other SOC technologies that assist in incident response.
  • Measure and improve alert fidelity through metrics creation, tracking, responding to tuning requests, implementing incident-specific detection logic, etc.
  • Support development of automations and orchestration playbooks in client SOAR platforms.

Similar Jobs

Plarium - SecOps Engineer

Plarium

Herzliya, Tel Aviv District, Israel (On-Site)
2 Weeks ago
Interactive Brokers - Penetration Testing Lead

Interactive Brokers

Mumbai, Maharashtra, India (Hybrid)
8 Hours ago
Google - Senior Cyber Security Consultant

Google

Sydney, New South Wales, Australia (On-Site)
1 Week ago
Google - Senior Digital Forensics Incident Response Consultant

Google

Los Angeles, California, United States (On-Site)
1 Week ago
Google - Strategic Security Consultant

Google

Toronto, Ontario, Canada (On-Site)
2 Weeks ago
ByteDance - Senior Security Software Architect - Security Engineering - San Jose

ByteDance

San Jose, California, United States (On-Site)
4 Months ago
Google - Senior Security Analyst, Cloud Threat Detection

Google

Dublin, County Dublin, Ireland (On-Site)
2 Weeks ago
Google - Senior Embedded Engineer, Security/Privacy, Pixel

Google

Warsaw, Masovian Voivodeship, Poland (On-Site)
2 Weeks ago
ByteDance - Senior Product Manager - Cloud Security

ByteDance

Singapore (On-Site)
5 Months ago
ION - ION A Platform - Information Security Analyst

ION

India (On-Site)
6 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Google - Software Engineer III, Frontend, GTI, Google Cloud

Google

Málaga, Andalusia, Spain (On-Site)
1 Week ago
Axon - Senior Security Operations Engineer II

Axon

Seattle, Washington, United States (Hybrid)
7 Hours ago
Google - Senior Cyber Security Consultant

Google

Sydney, New South Wales, Australia (On-Site)
1 Week ago
Google - Red Teaming and Threat Emulation Consultant

Google

New South Wales, Australia (On-Site)
1 Week ago
Google - Cyber Security Intelligence Instructor

Google

United Arab Emirates (On-Site)
2 Days ago
Google - Senior Cyber Security Consultant

Google

Sydney, New South Wales, Australia (On-Site)
2 Weeks ago
Google - Senior Red Team Security Consultant

Google

Atlanta, Georgia, United States (On-Site)
1 Week ago
Interactive Brokers - Manager Incident Response and Threat Intelligence

Interactive Brokers

Mumbai, Maharashtra, India (Hybrid)
8 Hours ago
Netflix - Security Engineer L5, Incident Response

Netflix

Warsaw, Masovian Voivodeship, Poland (On-Site)
2 Months ago
Google - Strategic Security Consultant

Google

Toronto, Ontario, Canada (On-Site)
1 Week ago

Get notifed when new similar jobs are uploaded

Jobs in London, England, United Kingdom

Assystems - Plater

Assystems

Derby, England, United Kingdom (On-Site)
6 Months ago
LeoVegas - Backend Engineer - Document Verification & AML

LeoVegas

Newcastle Upon Tyne, England, United Kingdom (Hybrid)
3 Weeks ago
Jane Street - Network Analyst

Jane Street

London, England, United Kingdom (On-Site)
7 Hours ago
PlayStation Global - Manager, Analytics Engineering

PlayStation Global

London, England, United Kingdom (On-Site)
5 Months ago
Media Molecule - Senior Producer

Media Molecule

London, England, United Kingdom (On-Site)
1 Month ago
FlawlessAi - Product Designer

FlawlessAi

London, England, United Kingdom (Hybrid)
1 Month ago
The Walt Disney Company - Coordinator, Localization Operations

The Walt Disney Company

London, England, United Kingdom (On-Site)
1 Week ago
Tesla - Sales Advisor

Tesla

Northampton, England, United Kingdom (On-Site)
2 Months ago
1920 - Production Coordinator for Commercials

1920

London, England, United Kingdom (Hybrid)
4 Months ago
GameJobs - ASO Manager

GameJobs

London, England, United Kingdom (Hybrid)
1 Year ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

Google - Staff Software Engineer, Product Security Engineering, Cloud CISO

Google

Kirkland, Washington, United States (On-Site)
1 Week ago
Tesla - Security Operations Center (SOC) Operator

Tesla

Milton Keynes, England, United Kingdom (On-Site)
2 Months ago
Google - Senior Security Engineer, Vulnerability Coordination Center

Google

Dublin, County Dublin, Ireland (On-Site)
2 Weeks ago
Canva - Security Engineering Manager - Vulnerability Management, Application Security

Canva

Surry Hills, New South Wales, Australia (Remote)
3 Weeks ago
NVIDIA - Network Security Research Architect

NVIDIA

United Kingdom (Remote)
1 Month ago
ByteDance - AI Security Researcher - Security Flow

ByteDance

San Jose, California, United States (On-Site)
6 Months ago
PwC - Cybersecurity Senior Associate

PwC

Makati, Metro Manila, Philippines (On-Site)
7 Months ago
Google - Software Engineer III, AI Agent Security, Core, Systems

Google

Zürich, Zurich, Switzerland (On-Site)
2 Weeks ago
Polygon Labs - Senior Security Engineer (Rust)

Polygon Labs

(Remote)
3 Weeks ago

Get notifed when new similar jobs are uploaded

About The Company

A problem isn't truly solved until it's solved for all. Googlers build products that help create opportunities for everyone, whether down the street or across the globe. Bring your insight, imagination and a healthy disregard for the impossible. Bring everything that makes you unique. Together, we can build for everyone.

Mountain View, California, United States (On-Site)

Mountain View, California, United States (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

Bengaluru, Karnataka, India (On-Site)

View All Jobs

Get notified when new jobs are added by Google

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug