Loading
G
Principal Threat Intelligence Analyst, Google Threat Intelligence Group
GoogleWaterloo, ON, CanadaSenior7+ years
Apply At Google, we have a vision of empowerment and equitable opportunity for all Aboriginal and Torres Strait Islander peoples and commit to building reconciliation through Google’s technology, platforms and people and we welcome Indigenous applicants. Please see our Reconciliation Action Plan for more information.
Note: Google's hybrid workplace includes remote and in-office roles. By applying to this position you will have an opportunity to share your preferred working location from the following:In-office locations: Sydney NSW, Australia; Melbourne VIC, Australia.
Remote location(s): Australian Capital Territory, AU; New South Wales, AU; Northern Territory, AU; Queensland, AU; South Australia, AU; Tasmania, AU; Victoria, AU.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 7 years of experience in cyber threat intelligence or incident response.
- Experience with Digital Forensics and Incident Response (DFIR) in both functional and leadership capacities or working with or managing intelligence researchers across the intelligence production lifecycle.
- Experience performing analysis within the cyber threat life cycle (e.g., digital forensics techniques/artifacts, malware research, and vulnerability exploitation.).
Preferred qualifications:
- Experience in SecOps, Security Information and Event Management
(SIEM), and detection engineering, with a proven ability to correlate malicious activity, analyze primary-source malware, and interpret software exploitation and vulnerability metrics. - Track record of producing polished, investigative deliverables under tight deadlines, including intelligence reporting and public-facing blog posts.
- Ability to scale operational impact by developing automated solutions using both Large Language Model (LLM) based and legacy workflows.
- Skilled at managing complex internal and external relationships and translating highly technical risks into actionable insights for executive audiences.
About the job
We are seeking a highly exceptional Principal Threat Intelligence Analyst to join our Cyber Threat Coordination Center (CTCC). In this role, you will operate at the very center of Google Threat Intelligence Groups (GTIG’s) response to complex, high-impact cybersecurity events. Serving as an incident commander, you will orchestrate immediate, continuous, and organized responses to critical incidents and widespread threat campaigns. You will be the critical link that translates complex technical threat data into clear narratives, maintaining situational awareness for executive stakeholders, and ensuring that GTIG speaks with "one voice" across all internal and external channels.
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
Responsibilities
- Lead ad-hoc teams to coordinate the overall response to significant threat actor operations.
- Jump into emerging threat activity to conduct initial analysis, swiftly assessing the scope, severity, and potential impact of the threat.
- Lead the publication process for rapid-release threat intelligence, including public-facing blogs, customer reporting, and internal enablement materials.
- Serve as a trusted advisor to executive leadership and external stakeholders by providing tailored briefings on emerging threats, incident progress, and business risks.
- Provide technical leadership and mentorship to analysts within GTIG and the broader organization, fostering a culture of continuous improvement.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.
Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.