Incident Response Consultant

About the role

Mandiant, part of Google Cloud, is hiring an Incident Response Consultant to deliver incident response, assessment, transformation, managed detection and response, and training services with deep tactical support. The consultant helps organisations detect and respond to threats and reduce business risk before, during and after an incident, resolving security incidents quickly, effectively and at scale through investigation, containment, remediation and crisis management. Engagements include helping clients navigate complex, high-profile incidents, performing forensic analysis, threat hunting and malware triage.

Key responsibilities

• Lead large, client-facing incident response engagements and examine cloud, endpoint and network-based sources of evidence.
• Conduct host forensics, network forensics, log analysis and malware triage.
• Recognise and codify attacker TTPs and IOCs applicable to current and future investigations.
• Develop and present reports, trainings and presentations for technical and executive audiences.
• Build scripts, tools or methodologies to improve Mandiant's incident investigation processes.

Required profile

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related technical field, or equivalent practical experience.
• 5 years of end-to-end incident response investigations, analysis or containment actions.
• 5 years of investigative experience in network forensics, malware triage, cloud forensics or disk and memory forensics.
• Ability to travel up to 30%.
• Preferred: experience managing multiple tasks and mentoring other consultants, and communicating findings to technical staff, executives, legal counsel and clients.

Required skills

• Preferred certifications: GCFA, GCFE, GNFA, GCIA, GREM, GCIH or GX-FA.
• Preferred: experience in security competitions, CTFs or platforms such as Hack the Box, TryHackMe and OverTheWire.