Associate Red Team Consultant

About the Role

As a Security Consultant within Mandiant, Google Cloud, you will be responsible for helping clients prepare for, mitigate, and respond to cybersecurity threats. You will apply your understanding of computer science, operating systems, networking, and cloud services to address cybersecurity threats. Engagements may include assisting clients with technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You will also test client networks, applications, and devices by emulating the latest techniques to help them defend against threats, acting as a technical advocate for information security requirements and providing an in-depth understanding of the information security domain. You will articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors, and lead complex engagements with cross-functional teams.

As a Mandiant Red Team Consulting team member, your responsibilities include assessing and advising clients on technical and process-based controls across various environments. You will perform Red and Purple Team assessments, including adversarial emulation of cyber attacks against customer organizations, and other technical cyber assessments such as external pen testing, web application, mobile, and wireless security testing. You will expand the team’s capabilities through tool creation, research on offensive techniques, incorporation of threat actor intelligence, internal presentations, and knowledge sharing.

Key Responsibilities

• Perform Red and Purple Team assessments, assumed breach assessments, ransomware readiness reviews, threat analysis, and social engineering assessments.
• Conduct external and internal wireless assessments, web and mobile applications testing, and embedded system assessments.
• Recognize and safely utilize attacker tools, tactics, and procedures.

Requirements & Tech Stack

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• Experience with end-to-end pen testing conducting scoping, manual vulnerability exploitation, and authoring technical remediation reports across network, web application, mobile, cloud, social engineering, scripting, or tool development.
• Ability to travel up to 30% of the time.
• Experience with tools used for wireless, web application, and network security testing.
• Excellent written/verbal communication skills, with the ability to develop documentation and explain technical details in a concise manner.

Qualifications

• Certifications related to offensive security including OSCE, OSEP, OSEE, OSCP, CCSAS, CCT, INF, or relevant SANS courses.
• Experience implementing or assessing information security implementation or assessment of security controls.

The application window will be open until at least October 29, 2026.

Preferred working locations include Wisconsin, USA; United States (Remote).

US Salary Range: $88500 - $125000 (USD) + 15% bonus target + equity + benefits.