Senior Analyst, Google Threat Intelligence, Mandiant
Summary
Analyze advanced cyber threats and adversary TTPs to produce intelligence reports and briefings for customers and executives.
Successful candidates may be required to obtain or currently possess CAT2A security clearance.
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
- Evaluate tools and best practices for tracking advanced threats, Tools, Techniques, and Procedures (TTPs) of attacker’s motivations, and industry and attacker trends.
- Perform strategic, tactical, and operational research and analysis of adversarial cyber threats.
- Correlate intelligence to develop deeper understandings of tracked threat activity.
- Present tactical and strategic intelligence about threat groups, the methodologies they use, and the motivations behind their activity and convey the importance of findings to a variety of audiences.
- Work with customers to determine their intelligence needs and requirements and prepare and deliver briefings and reports to the customers executives, security team, and fellow analysts.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 5 years of experience in data analytics, cybersecurity, technology research, anti-abuse, policy, or related fields.
- Experience in the consumption, processing, and analysis of Cyber Threat Intelligence (CTI) within an operational environment, supporting monitoring, detection, and response.
Preferred qualifications:
- 8 years of experience in data analytics, cybersecurity, technology research, anti-abuse, policy, or related fields.
- Experience navigating complex public sector processes and regulatory frameworks.
- Experience in analyzing network, endpoint, and security logs or telemetry for security investigations and threat hunting.
- Experience engaging with, and presenting to, technical stakeholders and executive leaders both verbally and in report writing.
- Experience with Cyber Threat Intelligence (CTI) methodologies and applications within cyber security organizations.