Principal Strategic Cyber Security Consultant, Mandiant
Please submit your resume in English - we can only consider applications submitted in this language.
Only applications of candidates with Mexican citizenship will be evaluated for this role in compliance with the provisions of Article 7 of the Federal Labor Law.
Note: Google's hybrid workplace includes remote roles. By applying to this position you will have an opportunity to share your preferred working location from the following: Remote locations: Brazil; Mexico.Minimum qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cyber-security, related technical field, or equivalent practical experience.
- 8 years of experience assessing and developing cyber-security solutions and programs across security domains.
- 8 years of experience in delivering cyber outcomes, identifying mission risks, and devising solutions.
- 3 years of experience with security frameworks (e.g., ISO27001, and NIST 800-53).
- 3 years of experience in designing and operating security program functions, including cyber defense operations, incident response, architecture, identity and access management, vulnerability management, or security risk management.
- Ability to travel up to 30% of the time as needed.
Preferred qualifications:
- Experience implementing industry-leading practices around cyber risks and cloud security for clients’ cloud security frameworks using industry standards.
- Experience with cloud governance, with the ability to convey governance principles to cloud computing in terms of policies.
- Knowledge of technologies used in pen testing, security event analysis, incident response, computer forensics, network and endpoint architecture, or other security operations (SecOps) areas.
- Knowledge of infrastructure, operating system and application vulnerabilities, security architecture, and controls.
- Knowledge of cyber threat landscape.
- Ability to communicate with clients in a concise manner while managing expectations at both executive and technical levels.
About the job
As a Mandiant Strategic Security Consultant, you will lead and support projects on behalf of clients that assess, test, or build their security programs. Project teams may range from 2 to 5 colleagues. Clients will range from start-up companies looking to supplement their security team to Fortune 100 companies that need fresh ideas to enhance their perspective on the security program. You will provide guidance and advice to our client on best practices and managing the risks for their security program.
In this role, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber-security threats. You will need to have a clear understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge against cyber security threats. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.Responsibilities
- Provide guidance on building or transforming cyber security programs and the implementation of technologies used for enterprise security. Provide advice on best practices for managing the cyber security risks during digital transformation as organizations.
- Conduct security reviews and maturity assessments across technology and Business teams to address cyber risk. Provide clear and organized risk findings and recommendations to clients.
- Interface with clients to address concerns, issues, or escalations, track and drive to closure any issues that impact the service and its value to clients.
- Evaluate client needs, coordinate design for a solution, and clearly communicate the value proposition of complex and highly technical subjects.
- Implement or assess existing security controls.