Senior Cyber Defense Analyst

About the role

This role reports to the Manager, Threat Management Center and operates within Google SecOps, our unified SIEM and case management platform. You will partner closely with Cyber Defense Engineering, Cyber Threat Intelligence, and Advanced Threat Operations during incident response, exercise significant independent judgment on incidents affecting multiple teams and systems, and mentor other responders across the function.

What you'll do

• Serve as the Threat Management Center's subject matter expert for incident response, leading end-to-end investigation, containment, eradication
• Validate and provide feedback on findings from the AI Alert Triage and Investigation Agent
• Lead incident command for significant and multi-system incidents, coordinating with Cyber Defense Engineering, Cyber Threat Intelligence, Advanced Threat Operations, IT
• Exercise significant independent judgment to scope, prioritize, and direct the response strategy for complex or ambiguous incidents escalated from automated detection
• Own and lead investigations into insider risk and fraud cases end to end, partnering with Insider Threat Engineering, Legal, and HR on findings and remediation

What you need

• 5–9 yrs of experience
• Incident response
• SIEM
• Splunk
• SOP writing
• Root cause analysis
• Any graduate