About the job
Successful candidates may be required to obtain or currently possess CAT2A security clearance.Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.Responsibilities
- Evaluate tools and best practices for tracking advanced threats, Tools, Techniques, and Procedures (TTPs) of attacker’s motivations, and industry and attacker trends.
- Perform tactical and operational research and analysis of adversarial cyber threats.
- Correlate intelligence to develop deeper understandings of tracked threat activity.
- Present tactical intelligence about threat groups, the methodologies they use, and the motivations behind their activity, and convey the importance of findings to a variety of audiences.
- Work with customers to determine their intelligence needs and requirements, and prepare and deliver briefings and reports to the customer's executives, security team, and fellow analysts.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 8 years of experience in data analytics, cybersecurity, technology research, anti-abuse, policy, or related fields.
- Experience in the consumption, processing, and analysis of Cyber Threat Intelligence (CTI) within an operational environment, supporting monitoring, detection, and response.
Preferred qualifications:
- 10 years of experience in data analytics, cybersecurity, technology research, anti-abuse, policy, or related fields.
- Experience navigating complex public sector processes and regulatory frameworks.
- Experience in analyzing network, endpoint, and security logs or telemetry for security investigations and threat hunting.
- Experience with Cyber Threat Intelligence (CTI) methodologies and applications within cyber security organizations.
- Experience engaging with, and presenting to, technical stakeholders and executive leaders both verbally and in report writing.