Lead detection and incident response for Mandiant in Ottawa, applying EDR, SIEM, threat hunting, and forensic analysis expertise.

As a Forward Deployed Consultant within Mandiant’s National Security team, you will embed with Canadian national security and defence clients. You will deliver security operations, incident response, assessments, transformation, managed detection and response, and training services. Your work supports secure and resilient organizations through technically complex engagements. You will investigate incidents, contain threats, remediate impacts, manage crises, and reduce mission risk. You will also develop agentic solutions, perform threat hunting, and conduct malware triage.

Key Responsibilities:

- Collaborate with teams to detect, respond to, and contain incidents
- Build agentic AI solutions for detection, response,



and remediation
- Codify attacker TTPs and IOCs for investigations
- Examine cloud, endpoint, and network evidence sources
- Present reports to technical and executive audiences

Requirements:

- Bachelor’s degree or equivalent practical experience
- Three years in SOC analysis, malware research, or threat hunting
- Experience with EDR and SIEM technologies
- Experience participating in incident response activities
- Eligibility for valid Personnel Security Clearance

Apply detection engineering, incident response, and threat hunting expertise to Mandiant’s national security client engagements.

📌 Cyber Defence Detection Response Consultant (Ottawa)
🏢 Google
📍 Ottawa