Security Consultant, SOAR, Mandiant, Google Cloud

Role Overview

You will work as a member of a highly technical team in a rapidly changing environment, administer a variety of information security technologies, learn new emerging technologies, and be passionate about protecting customer data and corporate assets from the various threats facing multiple industries.

Responsibilities

• Identify issues in customer Cyber Defense Centers, formulate strategies for improvement, identify candidates for automation, plan implementation of improvements, and execute/oversee plans to completion.
• Advise on technologies relied upon by the client CDC, CSIRT, and SOC.
• Provide expertise for SOAR and other SOC technologies that assist in incident response.
• Create and modify SOAR playbooks written in Python.
• Engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

Requirements & Qualifications

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 3 years of experience configuring and maintaining Security Orchestration, Automation, and Response (SOAR) Technologies as part of Security Engineering, System Administration, or a similar role.
• 3 years of experience working with SOC/CSIRT or other incident response related teams.
• Experience with Security Information and Event Management (SIEM) solutions (e.g., writing queries, searches, alerts, dashboards).

Preferred qualifications:

• One or more of the following certifications or similar: CompTIA Security+, CompTIA Network+; CISCO (CCNA); ISC2 (CISSP); SANS (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN).
• Experience managing and maintaining SOAR platforms and its dependencies, and working with/integrating APIs into automation playbooks.
• Experience with commercial SIEM technologies (e.g., Google SecOps, Splunk, Helix, Devo, Sentinel).
• Working knowledge of scripting languages (e.g., Python).
• Understanding of security controls for platforms/devices (e.g., Windows, Linux, network equipment), web-based APIs/RESTful programming (e.g., Python libraries), and data manipulation/analysis libraries (e.g., Pandas).
• Understanding of the incident response, containment, and remediation process.

Application Instructions

Apply directly on Google Careers at Security Consultant, SOAR, Mandiant, Google Cloud↗.

Direct application sign-in: Submit Application↗

Note: The application window will be open until at least September 24, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.