Minimum qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related technical field, or equivalent practical experience.
- 5 years' experience managing or leading a security program, coordinating technical projects, and guiding delivery teams to implement technical recommendations.
- Experience applying core cybersecurity principles and enterprise security architecture across heterogeneous environments.
- Ability to travel up to 30% and support the weekend on-call roster once every 6–8 weeks.
Preferred qualifications:
- Experience with enterprise security controls across on-premises and cloud infrastructures, including enterprise networking and network segmentation strategies.
- Experience with Privileged Access Management (PAM) best practices, Windows and Unix endpoint hardening, and security control enforcement.
- Experience working across multiple industries, verticals, and service providers.
- Proven experience documenting project requirements to define scope, manage schedules, track budgets, and manage technical deliverables under tight timelines.
- Direct experience securing AI pipelines, implementing AI-driven security tools, or securing cloud/enterprise architectures utilizing AI technologies.
About the job
As a part of the Mandiant’s Security Transformation Services (STS) team, you will help organizations build an effective security operations program that minimizes organizational risk and reduces the impact of security breaches, by utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, you will be able to help clients contain security events, harden their environments, and transform their security programs.
Mandiant is seeking a Remediation Advisor with advanced communication, technical, and project management skills to guide our clients through the complexities of cybersecurity. In this role, you will act as the organization's primary remediation leader both during and after a cyber security incident. In this role, you will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. You will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that containment, eradication, and recovery actions are unified, efficient, and aligned with business priorities. You will work with clients in similar scope on long term or strategic security transformation projects in addition to IR engagements.
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
Responsibilities
- Collaborate with and advise executive organizational stakeholders through the delivery of proactive and transformational initiatives, leveraging advanced technical insights to inform decision-making and evolve the client’s overall security posture.
- Advise and guide clients through testing cybersecurity incidents and recovery, providing advanced technical advice and support across a range of technologies to enable them to confidently navigate complex environments.
- Lead incident response and remediation workstreams, effectively managing projects, coordinating resources, and meticulously tracking progress to ensure successful client outcomes, while orchestrating and managing critical security operations, such as enterprise-wide password resets, ensuring minimal disruption and maximum effectiveness.
- Manage assigned resources, including coordinating with subcontractors, to provide clients with seamless and effective technical support throughout the remediation process.
- Travel up to 30% and support the weekend on-call roster once every 6–8 weeks.
