Information Operations Data Scientist, Mandiant Threat Intelligence

Key Skills

AWS, Azure, Docker, Framework, Machine learning techniques, Natural Language Processing (NLP), Python Programming, SQL

Job Description

Minimum qualifications:

• 5 years of experience in investigating information operations or tracking social media-driven influence, and disinformation campaigns.
• Experience leveraging data and applying statistical methods to identify trends and hunt for threats based on attacker techniques.
• Experience training machine learning models.
• Experience working with technical and non-technical peers to develop tangible outputs.

Preferred qualifications:

• Experience with graph analytics to hunt for threat activity patterns in data.
• Experience performing network infrastructure analysis to identify malicious cyber threat activity.
• Domain knowledge in geopolitics or skills in languages other than English, and cultural/political awareness about specific regions.
• Understanding of cyber threat intelligence analysis concepts, structured analytic techniques, and adversarial frameworks.
• Ability to work with structured and unstructured datasets to develop user-friendly outputs using different programming languages.
• Excellent communication, Python and SQL skills with an accessible writing style, and capability to create data visualizations to communicate analysis in creative ways.

About the job

In this role, you will support Mandiant’s Information Operations (IO) Threat intelligence team to find, analyze, and report on cyber-driven influence operations and disinformation campaigns. You will work with data to drive insights that help us protect audiences by exposing actors that leverage deceptive tactics to manipulate the online ecosystem.

You will become the liaison between our technical and threat analysis capabilities. You'll leverage and create tools to conduct analysis on information operations. You are a source of authority on analysis of IO threat activity, apply an investigative mindset, and work with other technical and threat analysts to create timely, actionable, clear, and concise intelligence reports for IO stakeholders.

Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats. Mandiant is now part of Google Cloud.

The US base salary range for this full-time position is $160,000-$246,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Apply accurate analytic and data tradecraft to detect, investigate, track, and report on cyber-driven and social media-driven information operations.
• Work closely with engineers and analysts to develop tooling to scale research into information operations.
• Develop code and leverage tools to analyze data in order to solve analytical problems and produce intelligence analysis.
• Conduct and lead comprehensive research into the Tactics, Techniques, and Procedures (TTPs) and motivation of state sponsored information operations campaigns and actors.