We are the operational and client-facing delivery arm of Mandiant Threat Intelligence Services for North and South America. Our team is made up of intelligence professionals responsible for ensuring our clients fully operationalize the intelligence they receive.
We serve as the primary bridge between Mandiant's frontline, global intelligence-gathering operations and our clients' unique security environments. Our resources are dedicated to the seamless, delivery of Mandiant's Custom Intelligence services and High Value Asset (HVA) intelligence offerings.
This role supports Mandiant's Custom Intelligence program. This team specializes in Custom Intelligence engagements for high-priority clients. As a Custom Intelligence Analyst, you will focus on delivering tailored intelligence solutions specifically aligned with each client's unique operations, geographic footprint, and specialized requirements. In this role, you will act as a dedicated analytic resource, building client relationships and working closely with stakeholders to scope priorities and define requirements. Your main objective is to provide high quality analytic output, ensuring that all deliverables are highly relevant, actionable, and deeply aligned to the customer's unique requirements. In addition to traditional cyber threat intelligence, you will support the High Value Asset program, providing bespoke executive protection solutions that identify convergent physical and cyber risks to executives across their personal and professional lives.
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
The US base salary range for this full-time position is $113,000-$161,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about
benefits at Google.
Responsibilities
- Collaborate with customers to understand their cyber threat intelligence (CTI) requirements, identifying unique opportunities to create custom intelligence solutions that maximize value to the customer and meet business objectives.
- Lead end-to-end production and delivery of tailored threat intelligence products, ensuring the provision of high-impact, insights for the customer's intelligence analysts, executive leadership, and key stakeholders.
- Communicate complex technical findings effectively to both technical and non-technical audiences, utilizing written reports and verbal briefings to convey information with professional clarity and precise impact.
- Transform raw intelligence from sensors and incident response into reports, leveraging industry AI/Large Language Models (LLMs) resources to mitigate critical threats and address emerging vulnerabilities in the environment.
- Conduct in-depth investigations into converging digital, cyber, and physical risks while fostering collaboration across internal teams, third parties, and Mandiant stakeholders to ensure holistic security.
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 3 years of experience in a customer-facing analytical role in cyber security (e.g. Network Forensics Analyst, Threat Intelligence Analyst).
- Experience engaging with, and presenting to, technical stakeholders and executive leaders.
- Experience with Security Risk Assessments or physical security.
Preferred qualifications:
- Experience researching, writing, and briefing threat intelligence for executive-level decision makers.
- Experience with CTI methodologies and application within cyber security organizations.
- Knowledge of adversarial cyber actors, to include tactics, techniques, and procedures.
- Understanding of core cybersecurity concepts, risk management frameworks, common enterprise IT infrastructure components, operating system internals, and networking.
- Ability to apply research methods and analytic techniques to address complex problems.
Note: Google's hybrid workplace includes remote roles. By applying to this position you will have an opportunity to share your preferred working location from the following:
Remote locations: Virginia, USA; United States.
The application window will be open until at least June 02, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.