[Remote] Cyber Analyst, Google Threat Intelligence Group, Mandiant

Note: The job is a remote job and is open to candidates in USA. Google, through its Mandiant division, is a recognized leader in cyber security expertise. The Cyber Analyst role involves delivering actionable intelligence to customers' security environments, requiring onsite client-facing work to support Mandiant's Advanced Intelligence Access program.

Responsibilities

• Evaluate tools and best practices for tracking advanced threats, tools, techniques, and procedures (TTPs) of attacker’s motivations, and industry and attacker trends
• Perform strategic, tactical, and operational research and analysis of adversarial cyber threats
• Correlate intelligence to develop deeper understandings of tracked threat activity
• Present tactical and strategic intelligence about threat groups, the methodologies they use, and the motivations behind their activity and convey the importance of findings to a variety of audiences
• Work with customers to determine their intelligence needs and requirements and prepare and deliver briefings and reports to the customers' executives, security team, and fellow analysts

Skills

• Bachelor's degree or equivalent practical experience
• Certification in one or more of the following: DoDM 8410.03 IAT Level II, CCNA-Security, CompTIA Sec+, CompTIA CySA+
• 5 years of experience in a customer-facing investigative role in cyber security (e.g. Network Forensics Analyst, Threat Intelligence Analyst)
• Experience engaging with, and presenting to, technical stakeholders and executive leaders
• Active US Government Top Secret/Sensitive Compartmentalized Information (TS/SCI) security clearance with polygraph
• Experience with Cyber Threat Intelligence (CTI) methodologies and application within cyber security organizations
• Experience in the analysis of CTI, supporting monitoring, detection, and response capabilities
• Experience in deploying and analyzing data from technical security controls (e.g., web proxy, firewalls, IPS, IDS, enterprise antivirus solutions, network analyzers)
• Experience deploying and analyzing data from technical security controls (e.g., firewalls, IPS/IDS, SIEM, and network analyzers)
• Proficiency in CTI methodologies and applying threat intelligence to monitoring, detection, and response capabilities
• Knowledge of MITRE ATT&CK, STIX, and standard network logging formats

Benefits

• 15% bonus target
• Equity
• Benefits

Company Overview