Senior Intelligence Analyst, GTIG Intel Delivery (Bulgarian)

As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.

As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams.

As a Mandiant Strategic Security Consultant, you will lead and support projects on behalf of clients that assess, test, or build their security programs. Project teams may range from 2 to 5 colleagues. Clients will range from start-up companies looking to supplement their security team to companies that need fresh ideas to enhance their perspective on the security program. You will provide guidance and advice to the client on best practices and managing the risks for their security program.
In this role, you will have the ability to work on-site with Sofia based clients 3-4 days per week. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone. Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

Bulgaria: €56000 - €57000 (EUR) + 15% bonus target + equity + benefits

Learn more about benefits at Google (https://www.google.com/about/careers/applications/benefits/).

Minimum qualifications:

- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.

- 5 years of experience working in a government or military environment, leveraging and developing CTI for network, host and log analysis, to enable the detection and response to cyber threats.

- Experience in leveraging CTI to describe, track and develop new intelligence on Advanced Persistent Threats.

- Ability to communicate in Bulgarian fluently to interact with local stakeholders.

Preferred qualifications:

- Experience with network IDS monitoring, EDR solutions, SIEM and SOAR integration, and managing and contributing CTI into a Threat Intelligence Platform.

- Experience conducting or supporting Incident Response and investigations within enterprise environments.

- Experience in SOC operations, threat hunting, detection engineering and SOC workflow design.

- Knowledge of core cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.

- Embed within, and build understanding of the customers' cyber threat intelligence (CTI) requirements to identify opportunities for deployment of CTI within their operations for maximum defensive impact.

- Track, research, and contribute CTI analysis within Google Threat Intelligence of customer's priority threat concerns.

- Support the integration of CTI into customer's security processes and technologies, including SIEM and TIP systems.

- Perform threat hunting, generate CTI, and analyze customer data from bespoke sources to identify threat activity and build automated analytical workflows.

- Enable customer SOC analysts and Hunt teams to deploy and leverage Google's CTI.