Principal Incident Response Consultant, Google Public Sector

Principal Incident Response Consultant, Google Public Sector Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities. The Incident Response team within Google Public Sector drives cybersecurity resilience across the public sector, delivering proactive defensive transformations and rapidly deploying incident response to contain breaches, leveraging considerable brand recognition that continuously enriches products and strengthens credibility as the premier public sector experts for front line against sophisticated nation‑state threats. Google Public Sector brings the magic of Google to the mission of government and education with solutions purpose‑built for enterprises. We focus on helping United States public sector institutions accelerate their digital transformations, and we continue to make significant investments and grow our team to meet the complex needs of local, state and federal government and educational institutions. Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy. Location: Reston, VA, USA ; Austin, TX, USA ; Boulder, CO, USA ; New York, NY, USA ; Sunnyvale, CA, USA ; Washington D.C., DC, USA Must be a US Citizen to meet customer and compliance requirements, including potential access to classified information. The application window will be open until at least June 25, 2026. This opportunity will remain online based on business needs which may be before or after the specified date. Minimum qualifications Bachelor's degree or equivalent practical experience. 8 years of experience managing enterprise incident response operations and threat containment. 3 years of experience scripting, working with code, or system design. Experience conducting host and network computer forensics to isolate root causes. Experience performing memory analysis to detect evasion techniques. Preferred qualifications Possession of industry‑recognized cybersecurity certifications such as CISSP, CISM, or GIAC (e.g., GCFA, GCFE). Experience implementing enterprise security solutions, such as threat detection and hunting, malware intelligence, or Cloud Security Posture Management (CSPM). Responsibilities Conduct analysis and manage consulting engagements with a focus on incident response and forensics, serving as the subject matter expert and point person from kickoff through full remediation. Recommend and document specific countermeasures and mitigating controls while mentoring less experienced staff throughout the engagement lifecycle. Identify and develop new business opportunities, articulating the combined capabilities of Google and Mandiant in marketing discussions and capability briefings. Develop comprehensive reports and presentations for technical and executive audiences while improving business processes and incident response methodologies. Benefits Individual pay is determined by factors including job‑related skills, experience, and relevant education or training. US: $207,000 - $301,000 (USD) + 20% bonus target + bonus + equity + benefits. Equity is granted exclusively and discretely by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. Grants are discretionary and subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right. Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents‑to‑be, criminal histories consistent with legal requirements, or any other basis protected by law. If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form. Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting. To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes. #J-18808-Ljbffr Google