Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 33 hours ago

Detection and SOAR Engineer, Mandiant Consulting, Google Cloud

Google3,434 open roles

Where
Australian Capital Territory, AU; New South Wales, AU; Victoria, AU
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowDetection and SOAR Engineer, Mandiant Consulting, Google CloudGoogle · Australian Capital Territory, AU; New South Wales, AU; Victoria, AU

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Google's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.0% of postings close within 7 days. Measured by our own scanner across the market. Google postings stay open a median of 28 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 9.0%7 days
  4. 15.5%14 days
  5. 33.9%30 days
This job: first seen 33 hours ago

Google median: 28 days open

The posting

Google will be prioritizing applicants who have a current right to work in Australia, and do not require Google’s sponsorship for a visa.

At Google, we have a vision of empowerment and equitable opportunity for all Aboriginal and Torres Strait Islander peoples and commit to building reconciliation through Google’s technology, platforms and people and we welcome Indigenous applicants. Please see our Reconciliation Action Plan for more information. Note: By applying to this position you will have an opportunity to share your preferred working location from the following:

Remote locations: Australian Capital Territory, AU; New South Wales, AU; Victoria, AU.

Minimum qualifications:

  • Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
  • 3 years of experience in detection engineering, SOAR automation, or a related role.
  • 3 years of experience working with SOC/CSIRT or other incident response related teams.
  • Experience with detection tuning and creation leveraging various security tools (e.g., SIEM, EDR, or NDR tools).
  • Experience with scripting Security Information and Event Management (SIEM) solutions (e.g., writing queries, searches, alerts, dashboards) in Python or Powershell.

Preferred qualifications:

  • Certifications in one or more of the following: CompTIA Security+, CompTIA Network+; CISCO (CCNA); ISC2 (CISSP); SANS (GSEC, GCIH, GCED, GCFA, GCIA, GNFA, GPEN).
  • Experience with SOAR and its dependencies, managing and maintaining SOAR platforms, as well as integrating APIs into automation playbooks.
  • Experience with content engineering inside SIEM platforms (e.g., rule creation, advanced correlation searching, etc.).
  • Experience with SPL, KQL, YARA-L or similar SIEM query languages, with an understanding of SIEM log flow, aggregation, and forwarding.
  • Understanding of logging for common platforms and devices, including Linux and network equipment.

About the job

In this role, you will collaborate with multiple cross-functional teams like Mandiant Architects, Mandiant Analysts, Client Information Technology (IT) resources, and other business resource owners. You will be responsible for enabling the technology and tools required to effectively accomplish daily tasks within a Cyber Defense Center (CDC). This includes maintaining operational readiness of the client Security Information and Event Management (SIEM) and Security Orchestration, Automation and Response (SOAR) platform, creating detection content and automations to support the daily tasks within the CDC. In addition, you may be responsible for setting appropriate configurations of the SIEM and SOAR or related response technologies required for a client's SOC to maintain effective incident detection and response capabilities. Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

  • Identify challenges in customer Cyber Defense Centers (CDC) and formulate strategies for improvement, plan implementation of improvements, and execute/oversee plans to completion.
  • Advise on technologies relied upon by the client CDC, Computer Security Incident Response Team (CSIRT), and SOC.
  • Create and modify SIEM use cases written in both technology specific query language and Sigma open signature format. Create and modify SOAR playbooks written in Python.
  • Engage and collaborate with client stakeholders and other groups within customer environment to drive resolution for security issues.
  • Provide expertise for SIEM, SOAR and other SOC technologies that assist in incident response, and provide surge support for analyst T1-3 capabilities when required.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Google's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Google's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Google's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.