Security Engineer, Consultant, Mandiant

Minimum qualifications:

• 3 years of experience in data analytics, including metrics and reporting or business intelligence.
  
• 3 years of experience in scripting.
  
• 1 year of experience working with cyber defense teams in an operational environment (e.g., SOC/Customer Incident Response Team (CIRT), Cyber Threat Intelligence, or Blue Team).
  

Preferred qualifications:

• Certification in one or more of the following: CompTIA Security+, CompTIA Network+ CISCO (CCNA), ISC2 (CISSP), SANS (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN).
• Experience in writing reports for executive leadership and technical audiences to clearly communicate findings, assessments, and recommendations.
  
• Knowledge of scripting languages (e.g., Python) and data science tools and technologies.
  
• Understanding of cyber defense operations, including incident response, containment, and remediation process, cyber threat intelligence, or security architecture.
  
• Excellent written/verbal communication and people management skills, with the ability to simplify and communicate complex ideas.
  

About the job

As a Infrastructure Engineer, you will be responsible for building, maintaining, and enabling the technologies, tools, data sets, and appropriate metrics to provide actionable, timely, and relevant operational and tactical reporting that drive cyber defense initiatives. You will collaborate with multiple cross-functional teams like Mandiant Architects, Mandiant Analysts, Client Information Technology (IT) resources, and other business resource owners to define requirements and deliver recommendations focused on operations required to support the client's Cyber Defense Center (CDC). In addition, you will also be responsible for building and maintaining reporting dashboards and operational metrics and communicating key areas of improvement to enhance the client’s overall CDC capabilities.

Responsibilities

• Leverage and utilize various analytic tools and platforms to synthesize disparate data sources.
• Provide expertise in data analytics to drive operational and tactical metrics and reporting to improve cyber defense capabilities.
• Articulate findings that are relevant, actionable, and timely to drive cyber defense initiatives.
• Develop dashboards, analytic methodologies, and key outputs within Security Information and Event Management (SIEM), business intelligence, and other reporting tools.
• Engage and collaborate with client stakeholders and other groups within customer environments to drive resolution for security issues.