Senior Red Team Consultant, Mandiant, Google Cloud

Minimum Qualifications:

• Bachelor's degree or equivalent practical experience in cybersecurity, with a focus on offensive security.
• 5 years of experience in covering at least four of the following areas: red teaming, pen testing, purple teaming, network security, web application assessments, social engineering, scripting, tool development, cloud security, reverse engineering, source code review.
• Experience with operating system security across Linux or Mac.
• Experience in leading teams in scoping, planning, executing, reporting or remediating the results

Preferred Qualifications:

• Certifications related to offensive security including OSCE, OSEP, OSEE, OSCP, CCSAS, CCT INF or relevant SANS courses.
• Experience working in offensive security consulting.
• Experience working with local sales and management teams in driving consulting business generation, scoping or client management.
• Experience in creating security tools and understanding of underlying programming languages such as Python, C#, C/C++, Rust, Nim or similar.
• Excellent communication, collaboration, and public speaking skills.

About The Job

In this role, you will provide cybersecurity consulting services to clients, assessing and advising on technical and process-based controls across all environments. You will serve as a technical lead on Red and Purple Team assessments, including end-to-end adversarial emulation of cyber attacks against customer organizations and external penetration, web application, and mobile security testing. You will expand the team’s capabilities through tool creation, research on offensive techniques, incorporation of threat actor intelligence, and internal presentations and knowledge sharing. You will develop comprehensive and accurate reports and presentations for technical and executive audiences, act as a trusted advisor to C-level security leaders and other customer stakeholders, assist with scoping prospective engagements, lead teams for engagements from kickoff through remediation phase, and mentor staff while maintaining keen understanding and familiarity with offensive security, threat actors, and security best practices.Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
The US base salary range for this full-time position is $132,000-$194,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.
The US base salary range for this full-time position is $132,000-$194,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Lead and perform offensive technical cyber security engagements of a varied nature, such as Red Team Assessments and various Pen Test types.
• Interface with clients to address concerns, issues, or escalations, track and drive to closure any issues that impact the engagements and its value to clients.
• Advise clients on security best practices for remediating discovered issues.
• Mentor consultants to help their technical and communication skills.
• Collaborate with internal teams to expand capabilities to deliver further value to clients.