Senior Incident Response Consultant, Mandiant, Google Cloud
Reston, VA, USA +20 · Senior · Full-time · Posted Oct 16, 2026
- Location
- Reston, VA, USA
Alabama, USA
Connecticut, USA
District of Columbia, USA
Delaware, USA
Florida, USA
Georgia, USA
Kentucky, USA
Massachusetts, USA
Maryland, USA
Maine, USA
North Carolina, USA
New Hampshire, USA
New Jersey, USA
New York, USA
Pennsylvania, USA
Rhode Island, USA
South Carolina, USA
Tennessee, USA
Virginia, USA
Vermont, USA - Experience
- 5 years in end-to-end incident response investigations, analysis, or containment; 5 years in specified investigative areas.
- Education
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
About the job
Provides client-facing cyber incident response services, investigating and containing incidents and guiding organizations through remediation and crisis management.
What you'll do
- Lead investigations across cloud, endpoint, and network environments, including forensics, log analysis, and malware triage.
- Identify attacker tools, tactics, procedures, and indicators of compromise to develop investigative scripts, tools, and methodologies.
- Present technical findings and briefings to technical teams and executive leadership.
What they ask for
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
- 5 years of experience working end-to-end incident response investigations, analysis, or containment actions.
- 5 years of investigative experience with network forensics, malware triage analysis, cloud forensics, or disk and memory forensics.
- Ability to travel up to 20%.
Nice to have
- Cloud platform or industry digital forensics and incident response certifications (e.g., SANS GCFA, GCFE, GCIH, or equivalent).
- Experience leading client-facing engagements, communicating findings to executives or clients, or mentoring consultants.
Pay
$138000 - $200000 (USD) base salary
Model-written summary · the original posting is authoritative