Senior Remediation Advisor, Mandiant STS

On-site in London·Added 13 days ago (last checked 1 Oct)

Google

168 open roles

Apply

Overview

Skills

Project Management

Nice to have

Networking

Requirements

Minimum qualifications:

Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related technical field, or equivalent practical experience.
5 years' experience managing or leading a security program, coordinating technical projects, and guiding delivery teams to implement technical recommendations.
Experience applying core cybersecurity principles and enterprise security architecture across heterogeneous environments.
Ability to travel up to 30% and support the weekend on-call roster once every 6–8 weeks.

Preferred qualifications:

Experience with enterprise security controls across on-premises and cloud infrastructures, including enterprise networking and network segmentation strategies.
Experience with Privileged Access Management (PAM) best practices, Windows and Unix endpoint hardening, and security control enforcement.
Experience working across multiple industries, verticals, and service providers.
Proven experience documenting project requirements to define scope, manage schedules, track budgets, and manage technical deliverables under tight timelines.
Direct experience securing AI pipelines, implementing AI-driven security tools, or securing cloud/enterprise architectures utilizing AI technologies.

The role

As a part of the Mandiant's Security Transformation Services (STS) team, you will help organizations build an effective security operations program that minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs.

Mandiant is seeking a Remediation Advisor with advanced communication, technical, and project management skills to guide our clients through the complexities of cybersecurity. In this role, you will act as the organization's primary remediation leader both during and after a cyber security incident. In this role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that containment, eradication, and recovery actions are unified, efficient, and aligned with business priorities. You will work with clients in similar scope on long term or strategic security transformation projects in addition to IR engagements.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

Collaborate with and advise executive organizational stakeholders through the delivery of proactive and transformational initiatives, leveraging advanced technical insights to inform decision-making and evolve the client's overall security posture.
Advise and guide clients through testing cybersecurity incidents and recovery, providing advanced technical advice and support across a range of technologies to enable them to confidently navigate complex environments.
Lead incident response and remediation workstreams, effectively managing projects, coordinating resources, and meticulously tracking progress to ensure successful client outcomes, while orchestrating and managing critical security operations, such as enterprise-wide password resets, ensuring minimal disruption and maximum effectiveness.
Manage assigned resources, including coordinating with subcontractors, to provide clients with seamless and effective technical support throughout the remediation process.
Travel up to 30% and support the weekend on-call roster once every 6-8 weeks.

Hiring process

4 steps3 interviewsa task to do6–8 weeks in all

Apply online
Assessments
Online test · Not every role
You may be asked to take the Google Hiring Assessment (workstyle skills) and, for some roles, role-related assessments such as a coding exercise.
Recruiter conversations
With a recruiter · Phone call · 1–2 sessions
One or two shorter conversations assessing key skills, sharing information about the organisation and team, and asking about your preferences such as location.
Project work
In your own time · Not every role
For some roles, a small project before interviews: a case study, writing or code samples.
Interviews
With a rotating cast of Googlers
A panel of structured interviews, over video or in person, with a rotating cast of Googlers; open-ended role-related questions scored against the same rubric for every candidate, no brainteasers.
Decision and offer · With a recruiter

Structured interviews: every candidate for a role is scored against the same rubric; no brainteasers.
AI tools are not permitted during interviews.
For some roles, pre-selected interviews happen virtually before final interviews onsite.