Incident Response Security Consultant – Mandiant

About the role

Join Mandiant, a Google Cloud business, as an Incident Response Security Consultant. You will deliver industry‑leading incident response, threat hunting, and forensic services to help organizations detect, contain, and remediate security incidents at scale.

Key responsibilities

• Lead large, client‑facing incident response engagements across cloud, endpoint, and network environments.
• Analyze and codify attacker tools, tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs).
• Perform forensic analysis, malware triage, and threat hunting on compromised systems.
• Provide assessment, transformation, managed detection and response, and training services.
• Collaborate with technical staff, executive leadership, and legal counsel to communicate findings and recommendations.
• Mentor junior consultants and manage multiple investigations simultaneously.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or equivalent practical experience.
• Minimum 3 years of investigative experience in network, cloud, disk, or memory forensics.
• At least 3 years of end‑to‑end incident response, analysis, or containment experience.
• Willingness to travel up to 30% of the time.
• Preferred certifications such as GCFA, GCFE, GNFA, GCIA, GREM, GCIH, GX‑FA.
• Experience with security competitions or platforms (CTFs, Hack the Box, TryHackMe, etc.).
• Strong communication skills for presenting findings to technical and executive audiences.

Required skills

• Network forensics
• Malware analysis
• Cloud forensics
• Disk forensics
• Memory forensics
• Incident response investigation
• Threat hunting
• Forensic analysis
• Containment and remediation
• Crisis management