The Cyber Defense Detection Engineer at Mandiant, Google Cloud, is responsible for helping clients prepare for and respond to cybersecurity threats. This role involves identifying enterprise security requirements and providing guidance on security initiatives. The engineer will serve as technical support for security tools and assist with their implementation and integration. Additionally, the position requires collaboration with client stakeholders to drive resolution for security issues.

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field, or equivalent practical experience.
• 3 years of experience with detection tuning and creation leveraging various security tools such as SIEM, EDR, or NDR tools.
• Experience with content engineering inside SIEM platforms, including rule creation and advanced correlation searching.
• Experience with scripting languages such as PowerShell and Python.
• Ability to travel up to 20% of the time as needed.

• Identify challenges in customer Cyber Defense Centers and formulate strategies for improvement.
• Create and modify SIEM use cases and detection logic using cyber threat intelligence.
• Provide expertise for SIEM and other SOC technologies that assist in incident response.
• Measure and improve alert fidelity through metrics creation and tracking.
• Engage and collaborate with client stakeholders and other groups within the customer environment to drive resolution for security issues.

• Employees at Google are often offered benefits like comprehensive health insurance, 401(k) matching, and flexible work arrangements, among other benefits.