Incident Response Security Consultant – Mandiant

About the role

The Incident Response Security Consultant will join Mandiant, part of Google Cloud, to deliver industry‑leading incident response, assessment, managed detection and response, and training services. You will help organisations detect, contain and remediate security incidents while reducing business risk before, during and after an event.

Key responsibilities

• Provide end‑to‑end incident response, including investigation, containment, remediation and crisis management.
• Perform forensic analysis, malware triage, memory and network forensics, and cloud forensics on high‑profile incidents.
• Conduct threat hunting and support clients through technically complex security events.
• Deliver tactical support and guidance to technical staff, executive leadership, legal counsel and external clients.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field, or equivalent practical experience.
• Minimum 3 years of investigative experience in network forensics, malware triage, cloud forensics, or disk and memory forensics.
• At least 3 years of experience in full incident response investigations, analysis or containment.
• Ability to travel up to 30 % of the time.
• Preferred certifications: GCFA, GCFE, GNFA, GCIA, GREM, GCIH, GX‑FA or equivalent.
• Experience with security competitions (CTFs) and platforms such as Hack the Box, TryHackMe or OverTheWire.
• Strong communication skills to convey findings to technical and non‑technical audiences.

Required skills

• CTFs
• GNFA
• OverTheWire
• Cloud platforms
• GX‑FA
• Malware triage
• Memory forensics
• Forensic analysis
• Network forensics
• Hack the Box
• GCIA
• Cloud forensics
• GREM
• GCFA
• TryHackMe
• GCFE
• GCIH
• Incident Response
• Threat Hunting
• Log Analysis