Principal Security Consultant, Security Architecture and Remediation, Mandiant
About the position
In this role, you will be responsible for helping clients effectively prepare to mitigate, and respond to cyber security threats. You will identify enterprise security requirements and provide guidance to enterprise initiatives. You will serve as technical support for security tools and assist with security tool implementation and integration into the customer environment. You will also provide guidance on the development of containment and remediation plans for cyber security incidents. In addition, you will be the technical advocate for information security requirements and provide information of the security domain. You will execute on both strategic and tactical plans, including direct engagement and delivery in technical matters. You will articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
Responsibilities
• Lead, coordinate, and conduct technical security assessments for cloud-based security infrastructures and platforms.
• Assist clients with designing and implementing architecture enhancements, security configurations, identity protections, cloud workflows, and appropriate countermeasures to defend against threats and attacker techniques.
• Build scripts, tools, or methodologies to enhance Mandiant's on-premise active directory or Cloud Assessment processes.
• Develop and present comprehensive and accurate reports, training, and presentations for technical and executive audiences.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences.
• Communicate strategies and roadmap initiatives to client stakeholders including technical staff, executive leadership, and legal counsel.
Requirements
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related technical field or equivalent practical experience.
• 8 years of experience with on-premise active directory, enterprise architecture and cloud architecture with one of the primary cloud platforms (GCP).
• Experience with tagging and labelling inheritance using MS Purview of similar to ensure labels persists as data moves from storage to a desktop or an email.
• Experience with network topology and common security controls, disaster recovery architecture, and backup technology.
• Experience with data classification, Data Security Posture Management (DSPM), and Data Loss Prevention (DLP) suites (e.g., Forcepoint, Netskope, etc.).
Nice-to-haves
• Certification in one or more of the following: CompTIA Security+, CompTIA Network+, ISC2 (CISSP), SANS-GIAC certification (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN, GWAPT), CISCO (CCNA), EC-Council (CEH, LPT).
• Experience communicating remediation recommendations and strategies to technical staff, executive leadership, legal counsel, and internal and external clients.
• Experience in incident response remediation or disaster recovery.
• Excellent written and verbal communication skills, with the ability to develop documentation and explain technical details in a concise manner.
• Excellent attention to detail and time management skills.
• Ability to travel up to 25%.
Benefits
• bonus
• equity
• benefits
Apply Now
Apply Now
In this role, you will be responsible for helping clients effectively prepare to mitigate, and respond to cyber security threats. You will identify enterprise security requirements and provide guidance to enterprise initiatives. You will serve as technical support for security tools and assist with security tool implementation and integration into the customer environment. You will also provide guidance on the development of containment and remediation plans for cyber security incidents. In addition, you will be the technical advocate for information security requirements and provide information of the security domain. You will execute on both strategic and tactical plans, including direct engagement and delivery in technical matters. You will articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
Responsibilities
• Lead, coordinate, and conduct technical security assessments for cloud-based security infrastructures and platforms.
• Assist clients with designing and implementing architecture enhancements, security configurations, identity protections, cloud workflows, and appropriate countermeasures to defend against threats and attacker techniques.
• Build scripts, tools, or methodologies to enhance Mandiant's on-premise active directory or Cloud Assessment processes.
• Develop and present comprehensive and accurate reports, training, and presentations for technical and executive audiences.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences.
• Communicate strategies and roadmap initiatives to client stakeholders including technical staff, executive leadership, and legal counsel.
Requirements
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related technical field or equivalent practical experience.
• 8 years of experience with on-premise active directory, enterprise architecture and cloud architecture with one of the primary cloud platforms (GCP).
• Experience with tagging and labelling inheritance using MS Purview of similar to ensure labels persists as data moves from storage to a desktop or an email.
• Experience with network topology and common security controls, disaster recovery architecture, and backup technology.
• Experience with data classification, Data Security Posture Management (DSPM), and Data Loss Prevention (DLP) suites (e.g., Forcepoint, Netskope, etc.).
Nice-to-haves
• Certification in one or more of the following: CompTIA Security+, CompTIA Network+, ISC2 (CISSP), SANS-GIAC certification (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN, GWAPT), CISCO (CCNA), EC-Council (CEH, LPT).
• Experience communicating remediation recommendations and strategies to technical staff, executive leadership, legal counsel, and internal and external clients.
• Experience in incident response remediation or disaster recovery.
• Excellent written and verbal communication skills, with the ability to develop documentation and explain technical details in a concise manner.
• Excellent attention to detail and time management skills.
• Ability to travel up to 25%.
Benefits
• bonus
• equity
• benefits
Apply Now
Apply Now