"Alerted.org

This position requires onsite client-facing work three days a week in Dallas, Texas.

Minimum qualifications:

+ Bachelor's degree or equivalent practical experience.

+ 7 years of experience in a customer-facing investigative role in cyber security (e.g., Network Forensics Analyst, Threat Intelligence Analyst).

+ Experience with project management.

+ Experience engaging with, and presenting to, technical stakeholders and executive leaders.

Preferred qualifications:

+ Experience evaluating host and network forensic reports of electronic media, packet capture, log data analysis, malware triage and network devices in support of information security operations.

+ Experience processing and analyzing tactical CTI within a fluid operational environment, supporting monitoring, detection, and response capabilities.

+ Ability to correlate raw intelligence from sensors, incident response engagements, and other sources into reports and briefings.

+ Ability to take complex, ambiguous topics, build strategy, and influence stakeholders.

+ Excellent written/verbal communication to convey complex technical data and information to both technical and non-technical audiences while producing clear and concise threat intelligence reports.

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to defend against and respond to cyber threats. Mandiant Threat Intelligence Services is a part of Google’s Threat Intelligence Group under Google Cloud.

Advanced Intelligence Access (AIA) is Mandiant’s premium cyber threat intelligence subscription, offering customers access to a wide range of Mandiant data, tooling, and expertise via a dedicated Mandiant employee, providing support within the customer’s network. AIA is tailored to the needs of each customer, allowing for improved integration and outcomes.

In this role, you will be the primary Mandiant representative serving as a tactical early indicator and warning analyst within the client Cyber Fusion Center, delivering Mandiant early warning threat indicators and behaviors (tactics, techniques, and procedures) related to priority threat actors and campaigns.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

The US base salary range for this full-time position is $132,000-$194,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google (https://careers.google.com/benefits/) .

+ Evaluate current and emerging tools and best-practices for tracking advanced persistent threats, tools, techniques, and procedures (TTPs) of attacker’s motivations, industry and attacker trends.

+ Perform operational, and tactical research and all-source analysis tailored to the client’s vertical, geographic footprint, and network mapping to produce timely and tailored intelligence.

+ Communicate complex technical findings effectively to both technical and non-technical audiences, verbally and in writing.

+ Support tactical and operational cyber fusion center stakeholders regularly to comprehensively identify and action their evolving intelligence needs and request for information.

+ Maintain an on-site presence at the customer's location multiple days per week, and facilitate the integration of CTI into the customer's existing security infrastructure, including Security Information and Event Management (SIEM) and Threat Intelligence Platform (TIP) systems.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also https://careers.google.com/eeo/ and https://careers.google.com/jobs/dist/legal/OFCCP_EEO_Post.pdf If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form: https://goo.gl/forms/aBt6Pu71i1kzpLHe2.