Google

Runs Search and YouTube and builds Gemini AI

Senior Intelligence Analyst - GTIG Intel Delivery, Bulgarian

Security Operations & Incident ResponseConfirmed live in the last 24 hours

Full-timeSofia, Bulgaria

About the Job

Requirements

A bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience is required.
At least 5 years of experience working in a government or military environment, leveraging and developing cyber threat intelligence for network, host, and log analysis to enable detection and response to cyber threats.
Experience leveraging cyber threat intelligence to describe, track, and develop new intelligence on Advanced Persistent Threats is required.
Ability to communicate fluently in Bulgarian to interact with local stakeholders is required.
Experience with network intrusion detection system monitoring, endpoint detection and response solutions, SIEM and SOAR integration, and contributing cyber threat intelligence to a Threat Intelligence Platform is preferred.
Experience conducting or supporting incident response and investigations within enterprise environments is preferred.
Experience in security operations center operations, threat hunting, detection engineering, and security operations workflow design is preferred.
Knowledge of core cybersecurity concepts, common enterprise IT infrastructure components, operating system internals, and networking is preferred.
Understanding of computer science, operating system functionality, networking, cloud services, corporate network environments, and applying this knowledge to cybersecurity threats is expected.
Ability to articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors is expected.

Responsibilities

Embed within customers' organizations and build understanding of their cyber threat intelligence requirements to identify opportunities for deploying cyber threat intelligence in their operations for maximum defensive impact.
Track, research, and contribute cyber threat intelligence analysis within Google Threat Intelligence concerning customers' priority threat concerns.
Support integration of cyber threat intelligence into customers' security processes and technologies, including SIEM and Threat Intelligence Platform systems.
Perform threat hunting, generate cyber threat intelligence, analyze customer data from bespoke sources to identify threat activity, and build automated analytical workflows.
Enable customer security operations center analysts and hunt teams to deploy and leverage Google's cyber threat intelligence.
Help clients prepare for, mitigate, detect, and respond to cybersecurity threats.
Assist clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage.
Test client networks, applications, and devices by emulating current threat techniques, and advocate for information security requirements.
Lead and support client engagements assessing, testing, or building security programs; advise clients on best practices and security-program risk management.
Work on-site with Sofia-based clients 3–4 days per week.

Embed within, and build understanding of the customers' cyber threat intelligence (CTI) requirements to identify opportunities for deployment of CTI within their operations for maximum defensive impact.
Track, research, and contribute CTI analysis within Google Threat Intelligence of customer's priority threat concerns.
Support the integration of CTI into customer's security processes and technologies, including SIEM and TIP systems.
Perform threat hunting, generate CTI, and analyze customer data from bespoke sources to identify threat activity and build automated analytical workflows.
Enable customer SOC analysts and Hunt teams to deploy and leverage Google's CTI.

Minimum qualifications:

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
5 years of experience working in a government or military environment, leveraging and developing CTI for network, host and log analysis, to enable the detection and response to cyber threats.
Experience in leveraging CTI to describe, track and develop new intelligence on Advanced Persistent Threats.
Ability to communicate in Bulgarian fluently to interact with local stakeholders.

Preferred qualifications:

Experience with network IDS monitoring, EDR solutions, SIEM and SOAR integration, and managing and contributing CTI into a Threat Intelligence Platform.
Experience conducting or supporting Incident Response and investigations within enterprise environments.
Experience in SOC operations, threat hunting, detection engineering and SOC workflow design.
Knowledge of core cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.

As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.

As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams.

As a Mandiant Strategic Security Consultant, you will lead and support projects on behalf of clients that assess, test, or build their security programs. Project teams may range from 2 to 5 colleagues. Clients will range from start-up companies looking to supplement their security team to companies that need fresh ideas to enhance their perspective on the security program. You will provide guidance and advice to the client on best practices and managing the risks for their security program.

In this role, you will have the ability to work on-site with Sofia based clients 3-4 days per week.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

Bulgaria: €56000 - €57000 (EUR) + 15% bonus target + equity + benefits

Learn more about benefits at Google.Remote location: Bulgaria.

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
5 years of experience working in a government or military environment, leveraging and developing CTI for network, host and log analysis, to enable the detection and response to cyber threats.
Experience in leveraging CTI to describe, track and develop new intelligence on Advanced Persistent Threats.
Ability to communicate in Bulgarian fluently to interact with local stakeholders.

About the Company

Google

Runs Search and YouTube and builds Gemini AI

Google runs the world's most used search engine and free services such as YouTube, Android, and Gmail, and it builds the Gemini AI models that work inside them. In 2017, its researchers invented the transformer, the neural network design behind ChatGPT and most other AI chatbots. People use these services without paying, and Google earns most of its money from ads placed beside search results and YouTube videos. Businesses rent computing power and Gemini models through Google Cloud, and Google also sells subscriptions and Pixel phones. Larry Page and Sergey Brin founded Google in 1998 as Stanford PhD students; it is based in Mountain View, California, United States, and is the main business of parent company Alphabet.

Company size: 10,001+
Company stage: IPO
Headquarters: Mountain View, CA
Founded: 1998

Recently Posted Jobs

Explore more opportunities at Google

See more jobs