Consultant, Red Team

Consultant, Red Team at Google (Mandiant Consulting)

As a Consultant, Red Team, you will deliver advanced cybersecurity consulting services and support to Google's clients, specifically within Mandiant Consulting. Your primary responsibilities involve assessing and advising clients on technical and process-based controls across various environments. This role includes performing Red and Purple team assessments, conducting adversarial emulation of cyber attacks, and executing other technical cyber assessments like external engagement, web application, mobile, and wireless security testing.

You will play a crucial role in expanding the team’s capabilities by creating new security tools, conducting research into offensive techniques, integrating threat actor intelligence, and contributing to internal presentations and knowledge sharing.

A key aspect of this position is developing comprehensive and accurate reports and presentations tailored for both technical and executive audiences. You will serve as a trusted advisor to C-level executives, security leaders, and other customer stakeholders. Additionally, you will assist in scoping prospective engagements, lead engagement teams from kickoff through remediation, and mentor junior staff.

Mandiant, a part of Google Cloud, is a recognized leader in dynamic cyber defense, threat intelligence, and incident response services, known globally for its expertise in confronting complex breaches and nation-state threats.

Responsibilities

• Perform offensive technical cyber security engagements of a varied nature.
• Advise clients on security best practices for remediating discovered issues.
• Collaborate with internal teams to expand capabilities to deliver further value to clients.
• Interface with clients to address concerns, issues, or escalations, track and guide to closure any issues that impact the engagements and its value to clients.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field or equivalent practical experience.
• 3 years of experience assessing and developing cybersecurity solutions across multiple security domains.
• Experience in four or more of the following: network protocols, threat intelligence analysis, system and network administration, project management, developing applications, technical incident response processes, source code review, reverse engineering.
• Experience in offensive security.
• Experience with operating system security across Windows, Linux, or Mac.

Preferred Qualifications

• Certifications related to offensive security including OSCE, OSEP, OSEE, OSCP, CISSP, CISA or relevant SANS courses.
• Experience working with local sales and management teams in driving consulting business generation, scoping or client management.
• Experience in creating security tools and understanding underlying programming languages (such as Python, C#, C/C++, Rust, Nim or similar).
• Ability to communicate technical details through reporting and presentations to both technical and executive audiences.
• Excellent communication, collaboration, and public speaking skills.

Key skills/competency

• Red Team Operations
• Offensive Security
• Cybersecurity Consulting
• Adversarial Emulation
• Threat Intelligence
• Incident Response
• Network Protocols
• Operating System Security
• Python Programming
• Client Engagement