Senior Offensive Security Consultant, Mandiant, Google Cloud

<h3>Minimum qualifications:</h3><ul> <li>Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.</li> <li>5 years of experience with pen testing and red teaming functions, including network, web application, mobile, cloud, social engineering, scripting, or tool development.</li> <li>Experience with tools used for wireless, web application, and network security testing.</li> <li>Ability to travel up to 20% of the time.</li> </ul><h3>Preferred qualifications:</h3><ul> <li>Certifications related to offensive security including OSCE, OSEP, OSEE, OSCP, CCSAS, CCT, INF, or relevant SANS courses.</li> <li> 5 years of experience in three of the following security areas: network, web application/mobile, cloud, social engineering, scripting, tool development.</li> <li>Experience in four or more of the following: network protocols, threat intelligence analysis, system and network administration, project management, developing applications, technical incident response processes, source code review, reverse engineering.</li> <li>Experience implementing or assessing information security implementation or assessment of security controls.</li> <li>Experience with developing documentation and explaining technical details in a concise manner.</li> </ul><h3>About the job</h3><div></div><h3>Responsibilities</h3><ul> <li>Perform red and purple team assessments, assumed breach assessments (e.g., red team engagements with a pre-deployed implant), ransomware readiness reviews (e.g., assessing susceptibility to modern ransomware threats), threat analysis, and social engineering assessments.</li> <li>Conduct external and internal wireless assessments, web and mobile applications testing, and embedded system assessments.</li> <li>Recognize and safely utilize attacker tools, tactics, and procedures.</li> <li>Develop comprehensive and accurate reports and presentations for both technical and executive audiences.</li> <li>Advise clients on security practices for remediating discovered issues.</li> </ul>