Senior Incident Response Consultant, Mandiant, Google Cloud

The Role

Consultants lead and contribute to high-profile client-facing incident response investigations, examining forensic evidence across cloud, endpoint, and network sources. Day-to-day work includes threat hunting, malware triage, containment actions, and crisis management, alongside codifying attacker TTPs and IOCs and developing scripts or tools to enhance investigation workflows.

Skills & Experience

Candidates need at least five years of IR investigation experience and five years across network forensics, malware triage, cloud forensics, or disk and memory forensics. Cloud platform certifications are preferred, as is familiarity with CTF and security testing platforms such as Hack the Box or TryHackMe. Strong written and verbal communication skills are essential.

Who It Suits

This role suits an experienced incident responder with a solid forensic foundation who thrives in a client-facing consulting environment. Those comfortable engaging both technical teams and executive stakeholders, willing to travel up to 20% of the time, and eager to mentor peers will find this an excellent fit.