Offensive Security Consultant - Google Cloud, Mandiant Consulting

Role Overview

Join Mandiant Consulting, a division within Google Cloud, as an Offensive Security Consultant. This role focuses on conducting sophisticated Red and Purple Team engagements to simulate cyber adversaries breaching client environments and to unveil security weaknesses. The team leverages cutting-edge threat intelligence and incident response experience to emulate real-world threat actors, ranging from ransomware groups to espionage perpetrators, across various architectures including on-premises networks and modern cloud-based systems.

Key Responsibilities

• Execute comprehensive adversarial simulations targeting client infrastructures, involving multiple attack vectors such as network, web applications, mobile, and wireless security assessments.
• Enhance team capabilities by developing custom offensive security tools, researching emerging attack techniques, and integrating current threat actor intelligence.
• Produce detailed, clear and actionable reports and deliver presentations tailored for both technical and executive stakeholders, serving as a trusted security advisor.
• Participate in engagement scoping, lead project teams throughout all phases from initiation to remediation, and provide mentorship to less experienced team members.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or an equivalent technical field, or practical equivalent experience.
• At least three years of hands-on experience in offensive security or red teaming roles, with expertise in areas such as network, cloud, web, mobile security, social engineering, scripting, or tool development.

Preferred Credentials

• Relevant professional certifications such as OSCE, OSEP, OSEE, OSCP, CISSP, CISA, or SANS-related courses.
• Proficiency in programming languages commonly used in security tool development, for example Python, C#, C/C++, Rust, Nim, or similar.
• Strong communication skills to effectively deliver complex technical information to diverse audiences including C-level executives.

Additional Information

Applicants should currently have the legal right to work in Singapore without the need for visa sponsorship by Google. The company is committed to equal employment opportunity, fostering a workplace free from discrimination or bias related to race, gender, age, disability, or other legally protected statuses. Reasonable accommodations for applicants with disabilities are available upon request.