US: $138000 - $200000 (USD) + 15% bonus target + equity + benefits
Learn more about benefits at Google.
Responsibilities
- Collaborate with internal and customer teams to investigate and contain cyber security incidents.
- Lead client-facing incident response investigations across cloud, endpoint, and network environments.
- Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.
- Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) to build investigative scripts, tools, and methodologies.
- Develop and present comprehensive reports and briefings on technical findings to both technical teams and executive leadership.
Minimum qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
- 5 years of experience working end-to-end incident response investigations, analysis, or containment actions.
- 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
- Ability to travel up to 20%.
Preferred qualifications:
- Certifications in cloud platforms or industry digital forensics and incident response (e.g., SANS GCFA, GCFE, GCIH, or equivalent).
- Experience in security competitions, Capture the Flags (CTFs), or platforms such as Hack The Box, TryHackMe, or OverTheWire.
- Experience communicating investigative findings and technical strategies to executive leadership, legal counsel, and clients.
- Experience leading client-facing incident response engagements, managing project deliverables, or mentoring consultants.
- Excellent time and project management skills.
- Active attendance at major cybersecurity conferences (e.g., Black Hat, DEF CON, etc.).