Incident Response Manager



Posted on Thursday, May 25, 2023

At Google, we have a vision of empowerment and equitable opportunity for all Aboriginal and Torres Strait Islander peoples and commit to building reconciliation through Google’s technology, platforms and people and we welcome Indigenous applicants. Please see our Reconciliation Action Plan for more information.

Note: Google’s hybrid workplace includes remote roles.

Remote location: Australia.


Minimum qualifications:

  • 8 years of experience in one of the following areas: system and network forensics or administration, threat intelligence analysis, technical incident response processes, reverse engineering, enterprise security.
  • Experience managing, growing, and leading a technical team.
  • Experience communicating investigative findings and strategies to technical staff, legal counsel, and internal and external clients.

Preferred qualifications:

  • Experience in implementation and design for enterprise security architecture, security controls, and best practices.
  • Experience leading incident response investigations, analysis, and containment actions.
  • Ability to lead clients in strategic conversations with an executive presence.
  • Excellent time management skills, with the ability to handle multiple tasks.

About the job

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is now part of Google Cloud.


  • Manage the high-performing Australia and New Zealand Incident Response team. Manage all client delivery requirements for Incident Response in Australia and New Zealand.
  • Collaborate and provide technical leadership for internal and customer teams to scope, investigate, and contain incidents. Provide expert quality assurance of work and deliverables.
  • Lead complex client-facing investigations and examine cloud, endpoint, and network-based sources of evidence. Build and manage customer relationships while scoping and delivering value add services.
  • Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs). Build scripts, tools, or methodologies to enhance Mandiant’s incident investigation processes that can be applied to current and future investigations.
  • Collaborate with other Google practices on engagements.

Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.

To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees or any other organization location. Google is not responsible for any fees related to unsolicited resumes.

At Google, we’re committed to building a workforce that is more representative of the users we serve and creating a culture where everyone feels like they belong. To learn more about our diversity, equity, inclusion commitments and how we’re building belonging, please visit our Belonging page for more information.

We welcome and encourage people who are expecting and/or parents-to-be to apply to this or any other role at Google.

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles.