Tier 2 Security Incident Response Security Engineer

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• Completed course offerings listed in DoD 8140 Training repository, or CEH, GSEC or Security+ certification.
• 5 years of experience in technical project management, stakeholder management, professional services, solution engineering or technical consulting, and 1 year of experience in technical leadership.
• 1 year of experience in technical troubleshooting and writing code in one or more programming languages.
• US Government Top Secret/Sensitive Compartmentalized Information (TS/SCI) security clearance with polygraph.

Preferred qualifications:

• Security+ or similar Cyber Security/Incident Response related certifications.
• Experience analyzing, triaging, and remediating common information security incidents.
• Understanding of common attacker tactics, tools, and techniques.
• Excellent written and verbal communication skills.
• Excellent problem-solving and investigative skills.

About the job

The Security Operations Center Team is responsible for monitoring and investigating security incidents for Google's public sector customers. The team is staffed 24/7/365 to monitor all customer activity and investigate any suspicious activity. The team also responds to security incidents and helps customers recover from them. The team is made up of security engineers, analysts, and other security professionals. The team has a deep understanding of the security threats that public sector organizations face and the latest security technologies. The team is committed to providing excellent security services to Google's public sector customers. This will include a need to work non-standard work hours or shifts (e.g., nights, weekends and holidays). Google Public Sector brings the magic of Google to the mission of government and education with solutions purpose-built for enterprises. We focus on helping United States public sector institutions accelerate their digital transformations, and we continue to make significant investments and grow our team to meet the complex needs of local, state and federal government and educational institutions.

The US base salary range for this full-time position is $161,000-$239,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google .

Responsibilities

• Analyze new alerts generated by correlation/alerting tools and other external alert sources.
• Review security operations center dashboards for anomalous activity.
• Escalate complex/unusual incidents to the executive Security Consulting team.
• Lead response efforts to low severity incidents.
• Support the response to high and medium severity security incidents as directed.