Foresite Cybersecurity

• You will work inside our 24/7 Cyber Fusion Center, handling escalated security alerts, leading complex investigations for our managed customers across Google Security Operations (Chronicle) and our SOAR platform, and serving as a subject matter expert for the broader team. • Act as the primary point of escalation for our Tier 1 Analysts. • Investigate incidents end-to-end: Review complex alert context, gather evidence from Chronicle UDM and supporting tools, reach a final disposition, and either close the ticket with a documented rationale or escalate to Tier 3/Incident Response with a clear handoff. • Optimize investigation playbooks: Follow established playbooks for the detection stack, but actively identify gaps, propose workflow improvements. • Communicate clearly in tickets: Ensure all tickets are understandable by the next analyst, the customer, or an auditor reading it six months from now. • Lead communications through the ticketing system on routine and complex investigations, requests for information, and exclusion/suppression requests.

• Partner closely with internal Blue Teams, SOC Analysts, and client IT leaders to identify vulnerabilities, map attack paths, and validate remediations. • Configure, deploy, and manage the Horizon3.ai NodeZero platform across diverse multi-tenant client environments, covering internal, external, cloud, and hybrid infrastructures. • Schedule and execute continuous or on-demand autonomous penetration tests based on client risk profiles, compliance mandates, or zero-day threats. • Analyze complex NodeZero testing outputs to differentiate between theoretical vulnerabilities and actual, exploitable attack vectors. • Translate highly technical attack data into clear, risk-prioritized remediation strategies for client IT and security leaders. • Conduct strategic Quarterly Business Reviews (QBRs) to visually demonstrate client security posture improvements and measurable security outcomes over time.

• Architect and build front-end features for a multi-tenant SaaS platform using React.js and TypeScript • Work across the full stack, owning backend integrations and data access patterns end-to-end • Build and maintain a shared component library • Partner closely with product, design, and backend engineers to ship features • Integrate with PostgreSQL and NoSQL data stores • Champion code quality through thorough reviews and consistent enforcement of engineering standards • Debugging, performance tuning, and keeping production healthy • Drive architectural decisions and contribute to engineering roadmap planning • Mentor junior and mid-level engineers through pairing, feedback, and code review • Identify and address performance bottlenecks across the front-end and API layers • Engage actively in Agile ceremonies including sprint planning, standups, reviews, and retrospectives • Document what you build and contribute to a culture of knowledge sharing

• As a Security Engineer specializing in Google SecOps, you will be a trusted advisor to our clients, guiding them through the implementation, optimization, and ongoing management of their Google security solutions. • Infrastructure Provisioning: Design, configure, and deploy Google security tools and platforms for clients, ensuring seamless integration with their existing environments. This may include configuring Google Cloud Security Command Center, Chronicle Security Operations, BeyondCorp Enterprise, and other relevant Google security services. • Provide expert-level support for client inquiries and issues related to Google SecOps tools and configurations. Diagnose and resolve technical challenges efficiently and effectively. • Offer proactive security guidance and recommendations to clients based on Google's security best practices and industry standards. Help clients understand and mitigate potential risks within their Google Cloud environments. • Collaborate with clients to understand their security objectives and develop tailored Google SecOps strategies. Advise on product selection, feature utilization, and roadmap planning to maximize their security investments. • Build and maintain strong, positive relationships with clients, acting as a primary technical point of contact for Google SecOps initiatives. • Create and maintain comprehensive documentation for client environments, configurations, and best practices. Share knowledge and expertise with internal teams. • Continuously research and stay up-to-date with the latest Google security product updates, features, and threat landscape trends.

• Manage end-to-end project execution for multiple, simultaneous customer and internal initiatives, partnering closely with technical teams—including engineering and cybersecurity—to translate requirements into actionable plans. • Oversee project planning, scheduling, resource allocation, and execution to ensure successful delivery for our clients. • Identify, document, and mitigate project risks and issues early; establish and maintain project governance, documentation, and reporting standards. • Serve as the primary project liaison for our customers. Lead client-facing meetings, manage external expectations, and ensure a seamless, transparent delivery experience from kickoff to project closure. • Communicate proactively with clients and internal stakeholders at all levels, providing status updates, risk assessments, and recommended actions tailored to both technical and non-technical audiences. • Build strong relationships across internal teams and client organizations to ensure accountability and alignment on project goals. • Partner with engineering and cybersecurity teams to ensure technical requirements are integrated into broader project milestones. • Contribute to process improvement initiatives, optimizing workflows and implementing best practices across the project lifecycle. • Conduct "lessons learned" sessions to identify areas for improvement and ensure continuous organizational learning.

• Act as the primary point of contact, orchestrating communication between client stakeholders and Foresite’s delivery teams to ensure seamless service execution. • Proactively manage account health metrics and conduct regular business reviews to ensure MSSP services meet established KPIs. • Align client business objectives with long-term protection and compliance goals, ensuring our delivery remains a high-value asset. • Own the full renewal lifecycle for Mid-Market accounts, identifying "at-risk" signs early and developing strategic mitigation plans. • Deeply understand evolving security needs to identify opportunities for upselling additional Foresite services or Google SecOps features. • Provide structured feedback to Foresite leadership to help refine managed service offerings and the overall Mid-Market customer experience.

• Lead the hands-on configuration of GCP SCC and Wiz for new customers, ensuring all high-fidelity security findings are correctly ingested into Google SecOps. • Ensure technical accuracy in parser creation and UDM mapping to maintain the highest quality of security data. • Write custom YARA-L detection rules to correlate cloud posture findings with network traffic. • Develop end-to-end SOAR Playbooks and utilize Python to write logic for custom actions, streamlining the customer's remediation workflows. • Lead sessions for customer analysts, teaching them how to navigate SCC/Wiz findings and investigate alerts within the Google SecOps interface. • Act as the technical point of contact for resolving integration errors and optimizing automation scripts.

• Operate at the intersection of Foresite’s cybersecurity expertise and Google’s security technology. • Partner closely with Google Cloud field sellers, Google Security specialists, and Foresite’s solution architects and delivery teams to identify opportunities, shape solutions, and close business. • Measured on new logo acquisition, annual recurring revenue (ARR), and the expansion of existing customer relationships. • Execute a strategic territory plan to achieve and exceed quarterly and annual bookings quotas for Foresite’s Google Security-aligned services. • Build and maintain a qualified pipeline through direct prospecting, account-based outreach, and co-selling with Google Cloud field teams and channel partners. • Lead negotiations and drive deals to completion, ensuring accurate forecasting and disciplined use of CRM (HubSpot/Salesforce) and deal-desk processes. • Collaborate with Google Cloud account teams on joint account planning, opportunity registration, and leveraging partner funding programs (MDF, POC funding) to accelerate cycles. • Partner with Foresite solution architects and Google specialists to design compelling, outcome-focused proposals and Statements of Work (SOWs). • Represent Foresite at industry events, Google Cloud partner forums, and customer briefings as a credible voice for our Google Security practice. • Develop deep relationships with CISOs, CIOs, and security leaders to understand their business drivers, compliance requirements, and SOC maturity. • Provide structured insights into Foresite’s product and marketing leadership regarding customer needs and competitive dynamics to enhance our service portfolio.

• Operate at the intersection of Foresite’s cybersecurity expertise and Google’s security technology. • Partner closely with Google Cloud field sellers and Google Security specialists to identify opportunities, shape solutions, and close business. • Execute a strategic territory plan to achieve and exceed quarterly and annual bookings quotas. • Build and maintain a qualified pipeline through direct prospecting and co-selling with Google Cloud field teams. • Lead negotiations and drive deals to completion, ensuring accurate forecasting and CRM processes. • Collaborate with Google Cloud account teams on joint account planning and leverage partner funding programs. • Develop deep relationships with CISOs, CIOs, and security leaders to understand their business drivers and compliance requirements. • Provide structured insights into Foresite’s product and marketing leadership regarding customer needs.

• Lead the design, development, and implementation of Google SecOps solutions, ensuring architectures align with client objectives and risk tolerance. • Support Google Cloud Security opportunities by owning the technical aspects of solutions, delivering product briefings, proofs-of-concept (POCs), and demos. • Research and evaluate new technologies to optimize security architectures and contribute to the development of industry best practices. • Collaborate with Security, Business, and Google Cloud teams to qualify opportunities and develop strategies to resolve technical or compliance blockers. • Assist in pricing and commercial discussions, ensuring technical solutions are viable and accurately scoped. • Provide technical mentorship to clients and internal teams, sharing expertise to empower others and drive project success. • Interact with Project Managers, Customer Success, and Marketing to ensure client satisfaction and organizational alignment. • Stay ahead of security trends and act as a credible voice for Foresite's security practice in professional environments.