Cyber Defence Analyst – Remote (EU)

About the role

Mandiant, part of Google Cloud, is seeking a Cyber Defence Analyst to work remotely from selected European locations. You will lead and support client projects that assess, test, and enhance their security programs, collaborating with small project teams and a range of customers from startups to large enterprises.

Key responsibilities

• Identify challenges in customer cyber‑defence centres, design improvement strategies, and oversee implementation to completion.
• Perform real‑time analysis using SIEM, endpoint, and networking technologies to detect security events and filter false positives.
• Advise on CDC, CSIRT, and SOC management activities.
• Research and apply cybersecurity intelligence, attacker techniques, containment methods, and remediation processes to boost SOC detection and response capabilities.
• Engage and collaborate with client stakeholders and internal teams to drive resolution of security issues.

Required profile

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or equivalent practical experience.
• Minimum 3 years experience assessing and developing cybersecurity solutions across security domains.
• Minimum 3 years experience as a SOC analyst, malware researcher, threat hunter, or similar role working with EDR and SIEM technologies.
• Fluent French communication skills for client‑facing interactions.
• Ability to work effectively with client stakeholders and cross‑functional teams.

Required skills

• SIEM platforms and EDR tools.
• Scripting with PowerShell and Python.
• Security controls for Windows, Linux, and network equipment.
• Threat hunting, malware research, and incident response.
• Knowledge of CDC, CSIRT, and SOC management processes.