Senior Security Engineer – Threat Intelligence Analyst

About the role

Google Cloud’s Mandiant team is seeking a Senior Security Engineer to lead threat intelligence analysis and help protect Google’s products and users. You will work on cutting‑edge adversary research, develop automation, and provide actionable intelligence to security and product teams.

Key responsibilities

• Identify, analyze, and document network signals, malware behaviors, and threat reports related to adversary tactics, techniques, and procedures (TTPs).
• Provide clear, actionable intelligence to product and security teams and help safeguard corporate and production systems.
• Own analysis of multiple threat actors and act as a subject‑matter expert on their potential impact.
• Design and implement automation, proof‑of‑concept code, and collaborate with stakeholders to deploy solutions.
• Prioritize work independently while maintaining quality and meeting deadlines.

Required profile

• Bachelor’s degree or equivalent practical experience.
• 5+ years of experience in security assessments, design reviews, threat modeling, or security engineering.
• 5+ years of coding experience in one or more general‑purpose languages.
• 1+ year leading technical teams or conducting enterprise‑level risk analysis.
• 2+ years in threat intelligence, incident response, or security operations center roles (preferred).

Required skills

• Detection engineering with YARA, Snort, Suricata, and EDR rule creation.
• Programming in Python, C/C++ or other scripting languages.
• Reverse engineering and malware analysis.
• Strong understanding of network fundamentals, lateral movement, persistence mechanisms, covert channels, application security, user authentication, and command‑and‑control techniques.