Consultant Red Team Google Cloud Mandiant Consulting📣 Job Ad

About the Role

Google Cloud's Mandiant Consulting team is seeking a Consultant to provide expert cybersecurity consulting services. This role involves assessing and advising clients on both technical and process-based controls across various environments. Mandiant is a recognized leader in dynamic cyber defense, threat intelligence, and incident response, trusted by security professionals and executives globally for its frontline experience, advanced threat intelligence, and security validation expertise.

Key Responsibilities

• Perform Red and Purple team assessments, including adversarial emulation of cyber attacks against customer organizations.
• Conduct other technical cyber assessments such as external engagement, web application, mobile, and wireless security testing.
• Advise clients on security best practices for remediating identified issues.
• Collaborate with internal teams to enhance capabilities and deliver client value.
• Interface with clients to address concerns, issues, or escalations, and guide them to closure.
• Expand team capabilities through tool creation, research on offensive techniques, incorporation of threat actor intelligence, and knowledge sharing.
• Develop comprehensive and accurate reports and presentations for technical and executive audiences.
• Act as a trusted advisor to C-level executives, security leaders, and other customer stakeholders.
• Assist with scoping prospective engagements, leading teams from kickoff through remediation, and mentoring staff.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 3 years of experience in three or more of the following security areas: network, red team assessments, EDR evasion, cloud, social engineering, scripting, tool development.
• Experience with operating system security across Windows or Linux.

Preferred Qualifications

• Certifications related to offensive security, such as OSCE, OSEP, OSEE, OSCP, CCSAS, CCT INF, or relevant SANS courses.
• Experience in payload development, lateral movement, privilege escalation, and EDR evasion.
• Experience in four or more of the following: network protocols, threat intelligence analysis, system and network administration, project management, developing applications, technical incident response processes, source code review, reverse engineering.
• Experience in architecting security tools using programming languages such as Python, C#, C/C++, Rust, Nim, or similar.
• Knowledge of operating system internals.

Work Location and Type

This is a full-time position located in Riyadh.