Tier 2 Security Incident Response Engineer

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• Completed course offerings listed in DoD 8140 Training repository, or CEH, GSEC or Security+ certification.
• 5 years of experience in technical project management, stakeholder management, professional services, solution engineering or technical consulting, and 1 year of experience in technical leadership.
• 1 year of experience in technical troubleshooting and writing code in one or more programming languages.
• US Government Top Secret/Sensitive Compartmentalized Information (TS/SCI) security clearance.

Preferred qualifications:

• Security+ or similar Cyber Security/Incident Response related certifications.
• Experience analyzing, triaging, and remediating common information security incidents.
• Understanding of common attacker tactics, tools, and techniques.
• Excellent problem-solving and investigative skills.
• Excellent written and verbal communication skills.

About the job

The team is made up of security engineers, analysts, and other security professionals. In this role, you will be responsible for monitoring and investigating security incidents for Google's public sector customers. You will be staffed 24/7/365 to monitor all customer activity and investigate any suspicious activity. You will also respond to security incidents and help customers recover from them.

You will be having a deep understanding of the security threats that public sector organizations gets and the latest security technologies.You will be committed to provide excellent security services to Google's public sector customers. This includes a need to work non-standard work hours or shifts (e.g., nights, weekends and holidays).

Google Public Sector brings the magic of Google to the mission of government and education with solutions purpose-built for enterprises. We focus on helping United States public sector institutions accelerate their digital transformations, and we continue to make significant investments and grow our team to meet the complex needs of local, state and federal government and educational institutions.

The US base salary range for this full-time position is $161,000-$239,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Analyze new alerts generated by correlation/alerting tools and other external alert sources.
• Review security operations center dashboards for anomalous activity.
• Escalate complex/unusual incidents to the executive Security Consulting team.
• Lead response efforts to low severity incidents.
• Support the response to high and medium severity security incidents as directed.