Security Consultant, Red Team, Mandiant

Google • Reston, VA

2d • $141,000 - $202,000

About The Position

Our Security team works to create and maintain the safest operating environment
for Google's users and developers. Security Engineers work with network
equipment and actively monitor our systems for attacks and intrusions. In this
role, you will also work with software engineers to proactively identify and fix
security flaws and vulnerabilities. Google Public Sector
[https://about.google/intl/ALL_us/public-sector/#:~:text=We're%20committed%20to%20advancing,%2C%20research%2C%20and%20edtech%20companies.]
brings the magic of Google to the mission of government and education with
solutions purpose-built for enterprises. We focus on helping United States
public sector institutions accelerate their digital transformations, and we
continue to make significant investments and grow our team to meet the complex
needs of local, state and federal government and educational institutions.

Requirements

• Bachelor's degree or equivalent practical experience.
• 2 years of experience with security assessments or security design reviews or threat modeling.
• 2 years of experience with security engineering, computer and network security and security protocols.
• 2 years of experience in technical consulting.

Nice To Haves

• Certifications related to offensive security including OSWE, GWAPT, GMOB, OSCE, OSEP, OSEE, OSCP, or equivalent mobile/web certifications.
• Experience in four or more of the following: network protocols, enterprise application design and architecture, mobile security, project management, “OWASP Top 10,” source code review, and reverse engineering.
• Experience in software development and understanding of underlying programming languages (such as C#, Python, ASP, .NET, Objective-C, Go, Java (J2EE), or similar).
• Knowledge of tools used for both static and dynamic application testing.

Responsibilities

• Identify security issues and design and implement security controls, tools, and services to improve security systems and processes.
• Shadow, support, and ultimately execute offensive technical cybersecurity engagements of a varied nature.
• Interface with clients to address concerns or escalations, tracking and driving to closure all issues that impact engagement value.
• Advise clients on security best practices for remediating discovered issues.
• Collaborate with internal teams to expand capabilities to deliver further value to clients.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level