Intrusion Analyst, Security Operations Job in Mountain View, California US
Intrusion Analyst, Security Operations - Mountain View
This position is based in Mountain View, CA.
The area: Operations and IT
In little more than a decade, Google created one of the world's largest global computing infrastructures for both internal and external use. We built it - and will continue to develop and support it - with the world's most talented administrators. Chances are that we exceed every example of a "large installation" you've encountered in your career as a network, systems or security professional. Using our unique technologies along with open source tools, we keep Google's customer-facing products running, robust and secure. Our objective is to create solutions that allow people to work and communicate in new and innovative ways - giving back to the world's technical community whenever we can.
The role: Intrusion Analyst, Security Operations
Intrusion Analysts are the first responders to security problems on Google's network including malware incidents, employee misconduct, sensitive data breaches, and external attacks. You will work closely with other members of Google's Security Team, in a 24/7/365 operation, to combat these threats and to build a more robust infrastructure.
Responsibilities:
- Participate in a 24/7 operation that monitors for and responds to security events on Google's networks, including working with external entities, where necessary.
- Improve internal investigation capabilities for responding to security events through tool building and training.
Minimum Qualifications:
- BS degree (In lieu of degree, 4 years of relevant work experience).
Preferred Qualifications:
- 1 year of relevant work experience, including experience in responding to security problems in target-rich environments, including looking at security alerts, front-line analysis and escalation.
- Desire to make the Internet a safer place.
- Familiarity with logs and intrusion detection systems.
- Expertise in common Forensics tools: Encase, FTK, SleuthKit.
- Programming experience in Python, C, Perl or Java.
- Demonstrated ability to analyze, triage and escalate malware, including investigations of botnet and rootkit behavior.
