Senior Consultant - Red Team Specialist, Google Cloud & Mandiant Consulting

About the Role

Joining as a Senior Consultant on Mandiant's Red Team within Google Cloud, you will engage in planning and conducting offensive security evaluations for clients. Your mission will be to execute simulations of advanced cyber attacks, from breaching external defenses to social engineering and internal network exploitation, mimicking real-world adversary techniques while evading detection.

Part of Google Cloud, Mandiant is internationally recognized for its leadership in cyber defense, threat intelligence, and incident response, combining frontline breach experience with advanced machine intelligence to tackle the most sophisticated cyber threats.

Key Responsibilities

• Conduct comprehensive Red and Purple Team operations, simulating real cyber adversaries through penetration testing across external networks, web, mobile, and wireless platforms.
• Enhance team capabilities by developing offensive tools, researching threat actor tactics, and sharing knowledge via presentations.
• Produce detailed, insightful reports tailored for technical experts and executive leadership, serving as a trusted security advisor.
• Lead engagement teams from initial scoping to remediation, providing mentorship and guidance for staff involved.

Required Qualifications

• Bachelor’s degree in cybersecurity focused on offensive security or equivalent hands-on experience.
• At least 5 years experience across three or more domains: application security, red team assessments, EDR bypass techniques, exploit development, cloud security, social engineering, scripting, or security tool creation.
• Proven ability presenting complex technical findings to both technical teams and executives.
• Proficiency in operating system security, particularly with Linux or other operating systems.

Preferred Qualifications

• Relevant offensive security certifications such as OSCE, OSEP, OSEE, OSCP, CCSAS, or CCT INF, or associated SANS training.
• Experience spanning four or more specialties including network protocols, threat intelligence, system & network administration, project management, application development, incident response, source code review, or reverse engineering.
• Demonstrated success in identifying zero-day vulnerabilities in web or mobile environments.
• Competency in creating security software and familiarity with programming languages such as Python, C#, C/C++, Rust, or Nim.
• Experience conducting thorough application source code analysis.
• Skilled in advanced tactics like payload development, lateral movement within networks, privilege escalation, and evading endpoint detection systems.

Location & Working Details

Applicants will have the option to indicate their preferred work location among Dubai (UAE), Riyadh (Saudi Arabia), or Doha (Qatar). The role is full-time onsite employment.

Equal Opportunity

Google is committed to foster a diverse workplace and is an affirmative action employer, offering equal employment opportunities regardless of race, color, religion, sex, national origin, sexual orientation, age, citizenship status, disability, gender identity, veteran status, or any legally protected categories. Accommodations are available upon request for applicants with disabilities.