Red Team Consultant

Red Team Consultant at Google Mandiant Consulting

As a Red Team Consultant, you will deliver vital cybersecurity consulting services and expert support to our diverse clientele. Your role involves assessing and advising clients on both technical and process-based controls across various environments.

You will lead Red and Purple team assessments, including advanced adversarial emulation of cyber attacks against customer organizations. Additionally, you will conduct other critical technical cyber assessments, encompassing external engagement, web application, mobile, and wireless security testing. A key aspect of this role is expanding the team’s capabilities through innovative tool creation, cutting-edge research on offensive techniques, integrating threat actor intelligence, and facilitating internal presentations and knowledge sharing.

You will be responsible for developing comprehensive and accurate reports and presentations for both technical and executive audiences, acting as a trusted advisor to C-level executives, security leaders, and other customer stakeholders. Your contributions will include assisting with scoping prospective engagements, leading teams from kickoff through the remediation phase, and mentoring other staff members.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence, and incident response services. Mandiant's unparalleled cybersecurity expertise has earned the trust of security professionals and company executives globally. Our unique blend of renowned frontline experience in responding to some of the most sophisticated breaches, nation-state grade threat intelligence, machine intelligence, and industry-leading security validation ensures that Mandiant possesses superior knowledge of today's advanced threats.

Responsibilities

• Perform offensive technical cybersecurity engagements of a varied and complex nature.
• Guide clients on security best practices for effectively remediating discovered issues.
• Collaborate closely with internal teams to expand capabilities and deliver enhanced value to clients.
• Engage directly with clients to proactively address concerns, issues, or escalations, tracking and guiding to closure any issues that impact engagements and their value to clients.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 3 years of experience assessing and developing cybersecurity solutions across multiple security domains.
• Experience in four or more of the following: network protocols, threat intelligence analysis, system and network administration, project management, developing applications, technical incident response processes, source code review, reverse engineering.
• Experience with operating system security across Windows, Linux, or Mac.
• Experience in offensive security.

Preferred Qualifications

• Certifications related to offensive security including OSCE, OSEP, OSEE, OSCP, CISSP, CISA, or relevant SANS courses.
• Experience working with local sales and management teams in driving consulting business generation, scoping, or client management.
• Experience in creating security tools and understanding underlying programming languages (such as Python, C#, C/C++, Rust, Nim, or similar).
• Ability to communicate complex technical details through reporting and presentations to both technical and executive audiences.
• Excellent communication, collaboration, and public speaking skills.

Key skills/competency

• Offensive Security
• Red Teaming
• Adversarial Emulation
• Threat Intelligence
• Incident Response
• Cybersecurity Consulting
• Network Protocols
• Operating System Security (Windows/Linux/Mac)
• Programming (Python, C#, C/C++, Rust, Nim)
• Client Engagement