Senior Strategic CDC/SOC Consultant, Mandiant, Google Cloud - Google
Not available, CA
About the Job
Minimum qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
- 4 years of experience assessing and developing cybersecurity solutions and programs across security domains.
- 4 years of experience delivering cyber outcomes, identifying risks, and devising solutions to combat public sector focused threats.
- 4 years of experience with CDC and SOC programs.
- Ability to travel up to 20% of the time as needed.
Preferred qualifications:
- Certifications related to specific Cloud Platforms Industry-standard cloud certifications (e.g. CCSP, CCSK, etc.), or other industry certifications (CISSP, CISM, CISA, etc.).
- Experience with cloud governance, with the ability to convey governance principles to cloud computing in terms of policies.
- Experience implementing industry-leading practices around cyber risks and cloud security for clients cloud security frameworks using industry standards.
- Experience with Security tools and operations.
- Excellent time management and project management skills.
About the job
As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats. As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams.
As a Strategic Security Consultant, you will lead consulting engagements and deliver results that align with the client's needs and risk profiles. You will develop Cyber Defense Center (CDC) and Security Operations Center (SOC) policies, procedures, and standards that are in line with industry best practices. You will also advise clients on infrastructure business strategies and roadmap for CDC and SOC technologies. Additionally, you will develop logging and monitoring strategies in clients cloud and on-premises environments. You will identify performance enhancement opportunities for client CDC and SOC programs. Furthermore, you will work with clients to implement, maintain CDC and SOC solutions across various platforms. You will collaborate with cross-functional teams to develop and implement effective cybersecurity controls and measures.
Responsibilities
- Lead execution of consulting engagements and development of deliverables from start to finish. Work with other team members to produce prioritized results aligned to client needs and risk profile. Develop Cyber Defense Center (CDC) and Security Operations Center (SOC) policies, procedures, and standards in line with industry best practices.
- Work with clients to develop an infrastructure business strategy and roadmap for CDC and SOC technologies.
- Conduct security reviews and maturity assessments across technology and Business teams to address cyber risk. Provide clear and organized risk findings and recommendations to clients.
- Collaborate with client's cybersecurity engineers to improve monitoring, detection, tooling, and integrations
- Advice on technologies relied upon by the clients CDC, SOC, and Computer Security Incident Response Team (CSIRT). Collaborate with client's cybersecurity engineers to improve monitoring, detection, tooling, and integrations
