Job Description

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience in intelligence, incident response, law enforcement, or enterprise security operations.
• Experience in engaging with, and presenting to, technical stakeholders and executive leaders.

Preferred qualifications:

• Experience with CTI methodologies and application within cyber-security organizations.
• Experience in the analysis of CTI, supporting monitoring, detection, and response capabilities.
• Experience in evaluating host and network forensic reports of electronic media, packet capture, log data analysis, malware triage and network devices in support of intrusion analysis or enterprise level information security operations.
• Knowledge of adversarial cyber actors, to include tactics, techniques, and procedures.
• Excellent verbal and written communication skills.

About the job

As part of the operational delivery arm for Mandiant Threat Intelligence, you will serve as the critical bridge between the global intelligence-gathering operations and the unique security environments of the clients across Australia and New Zealand (ANZ). This role specifically supports the essential intelligence access (EIA) program, a foundational subscription service designed to help organizations understand, prioritize, and defend against the evolving threat landscape.

Your primary goal is to ensure clients fully operationalize the intelligence they receive. You will act as a dedicated analytic resource and a representative of Google Cloud, focusing on making Mandiant’s expertise sticky and indispensable to the customer’s daily operations.

Key Responsibilities

• Transform curated intelligence and insights into actionable briefings and reports that meet the specific requirements of client stakeholders.

• Lead monthly alignment sessions to scope intelligence requirements, discuss emerging threat concerns, and ensure Mandiant’s portfolio supports the client’s security maturity.

• Monitor Mandiant’s proprietary holdings and credential leaks to provide urgent, relevant findings that protect client assets.

• Collaborate with customer SOC analysts and executive leadership to integrate CTI into their internal workflows and decision-making processes.

• Balance multiple client priorities while fostering strong relationships between internal Google teams, third-party partners, and customer security functions.

In this role, you will leverage your communication expertise and technical familiarity to drive high-impact partnerships, ensuring the clients stay ahead of the adversary.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

• Partner with customers to identify CTI needs and integrate intelligence into their operational workflows for maximum impact.
• Manage the delivery of Mandiant Threat Intelligence products, translate complex technical findings for both executive and technical audiences.
• Produce tailored reports and briefings by transforming raw data from incident response and security tools into actionable insights.
• Analyze priority threat concerns to update Mandiant’s knowledge base and empower SOC analysts to utilize CTI capabilities effectively.
• Drive cross-functional collaboration between internal teams, third-party partners, and stakeholders to enhance overall security posture.