Incident Response Consultant – Cybersecurity

About the role

As an Incident Response Consultant you will join Mandiant, the Google Cloud security unit, to deliver industry‑leading incident response, assessment and managed detection services. You will work directly with customers to detect, contain and remediate security incidents, helping organisations reduce risk before, during and after attacks.

Key responsibilities

• Collaborate with internal and client teams to investigate, contain and remediate security incidents.
• Lead complex, client‑facing investigations across cloud, endpoint and network data sources.
• Identify and document attacker tools, tactics, procedures and indicators of compromise.
• Develop scripts, tools or methodologies to improve investigation processes.
• Produce and present detailed technical and executive reports on findings and recommendations.

Required profile

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity or related field, or equivalent practical experience.
• At least three years of end‑to‑end incident response experience, including investigation, analysis and containment.
• Ability to communicate findings to technical staff, executive leadership, legal counsel and clients.

Required skills

• Incident response investigation and containment.
• Forensic analysis and malware triage.
• Threat hunting across cloud, endpoint and network environments.
• Experience with Google Cloud Platform or other cloud services.
• Scripting or tool development to automate investigative tasks.