Senior red team security consultant, mandiant (english)about the jobas a mandiant red team consulting team member, you will be responsible for assessing and advising clients on both technical and process-based controls across various environments.
you will perform red and purple team assessments, including adversarial emulation of cyber attacks against customer organizations, as well as external pen testing, web application, mobile, and wireless security testing.
you will expand the team's capabilities by adding tools, researching offensive techniques, incorporating threat-actor intelligence, presenting internally, and sharing knowledge.part of google cloud, mandiant is a recognized leader in dynamic cyber defense, threat intelligence, and incident response services.
mandiant's expertise has earned the trust of security professionals and executives worldwide.
our combination of frontline incident response, nation-state threat intelligence, machine intelligence, and security validation ensures deep knowledge of modern advanced threats.qualificationsbachelor's degree in computer science, information systems, cybersecurity, or related technical field; or equivalent practical experience.minimum 5 years of experience with penetration testing and red-team functions, covering network, web application, mobile, cloud, social engineering, scripting, or tool development.experience with tools used for wireless, web application, and network security testing.ability to travel up to 30% of the time.fluency in english communication to work with internal partners and customer teams.mexican citizenship (required for this role).
remote locations: colombia and mexico.preferred qualificationsrelevant offensive security certifications (osce, osep, osee, oscp, ccsas, cct, inf, or analogous sans courses).
experience implementing or assessing information security controls or security assessments.strong written and verbal communication skills; ability to develop concise documentation and explain technical details.responsibilitiesperform red and purple team assessments, assumed breach engagements, ransomware readiness reviews, threat analysis, and social engineering assessments.conduct external and internal wireless assessments, web and mobile application testing, and embedded system assessments.recognize and safely utilize attacker tools, tactics, and procedures.develop comprehensive and accurate reports along with presentations for technical and executive audiences.perform diverse offensive technical cybersecurity engagements.eeo statementgoogle is proud to be an equal-opportunity and affirmative-action employer.
we are committed to building a workforce that is representative of the users we serve, fostering belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy, or related condition (including breastfeeding), parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law.
see also google's eeo policy, know your rights: workplace discrimination is illegal, belonging at google, and how we hire.
#j-*-ljbffr