Security Consultant, Red Team, Mandiant Consulting

Security Consultant, Red Team, Mandiant Consulting Overview

This role is part of Google Cloud’s Mandiant consulting organization, which focuses on advanced cyber defense, threat intelligence, and incident response. The team is described as bringing together frontline breach response experience, nation-state-level threat intelligence, machine intelligence, and security validation expertise to help customers understand and defend against modern threats.

The position is remote-eligible, and applicants are able to indicate a preferred working location from the remote options listed in the posting, including the United Kingdom, Denmark, and the Netherlands.

What you will do

• Deliver offensive security work across a variety of engagement types, including red team and purple team operations and adversary emulation against customer organizations.
• Carry out additional technical assessments such as external testing, web application security reviews, mobile security testing, and wireless security testing.
• Advise customers on both technical and process-based security controls across different environments.
• Work directly with clients to respond to concerns, questions, and escalation points that arise during engagements.
• Monitor issues that affect the success or value of an engagement and push them through to closure.
• Help customers remediate findings by explaining security best practices and practical next steps.
• Expand the team’s delivery capabilities by developing tools, researching offensive methods, and bringing in threat actor intelligence.
• Contribute to internal learning by giving presentations and sharing knowledge with colleagues.
• Prepare thorough and accurate reports and presentations for both technical readers and executive-level stakeholders.
• Act as a trusted advisor to senior customer contacts, including C-suite leaders and security decision-makers.
• Support the scoping of prospective consulting work and help define engagement boundaries before delivery begins.
• Lead engagement teams from the initial kickoff through the remediation phase.
• Coach and mentor less experienced team members.
• Partner with internal groups to broaden the team’s capabilities and create more value for clients.

What you need

• A bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a closely related technical field, or equivalent practical experience.
• At least three years of experience assessing and building cybersecurity solutions across multiple security domains.
• Experience in four or more of the following areas: network protocols, threat intelligence analysis, system and network administration, project management, application development, technical incident response processes, source code review, and reverse engineering.
• Experience with operating system security, including Linux or other operating systems.
• Experience working in offensive security.
• Preferred offensive security certifications such as OSCE, OSEP, OSEE, OSCP, CISSP, CISA, or relevant SANS courses.
• Preferred experience working with local sales and management teams to help create consulting opportunities, define scope, or manage client relationships.
• Ability to build security tools and understand the programming languages used to create them, such as Python, C#, C/C++, Rust, Nim, or similar languages.
• Strong communication skills, including the ability to explain technical findings in reports and presentations for both technical and executive audiences.
• Excellent collaboration and public speaking skills.
• The role is described as mid-level, with expectations that the person can drive progress, solve problems, and mentor junior colleagues.
• English fluency is required for all roles unless the posting explicitly says otherwise.

Compensation and rewards

The posting includes location-based salary information and notes that total compensation may also include bonus, equity, and benefits. For Denmark, the listed range is kr. 780,000 to kr. 800,000, plus a 15% bonus target, equity, and benefits. For the Netherlands, the listed range is €92,000 to €94,000, plus a 15% bonus target, equity, and benefits.

Google also explains that equity grants are discretionary and governed by Alphabet’s stock plan, board or delegate approval, and the applicable grant agreement. The posting notes that equity is separate from statutory payments and that prior grants do not create an entitlement to future grants.

Additional information

The company states that it is an equal opportunity and affirmative action employer and that it is committed to building a workforce that reflects the people it serves. It also says that accommodations are available for applicants who need them and directs candidates to the accommodations form.

The posting further notes that Google does not accept agency resumes and asks recruitment agencies not to send resumes to its jobs alias, employees, or other locations. It also states that unsolicited resumes will not result in fees.

Applicants should be aware that Google says English proficiency is required for all roles unless the posting says otherwise, because the company operates globally and uses English to support collaboration and communication.

Degree Requirement: Not Specified

Visa Sponsorship May be