Senior Intelligence Analyst, Google Threat Intelligence Delivery

Google Amsterdam, Netherlands. Remote eligible.

Google’s hybrid workplace includes remote and in‑office roles. You can choose your preferred working location:
In‑office:
Amsterdam, Netherlands.
Remote:
Netherlands.

• Bachelor's degree or equivalent practical experience.
• 5 years of experience in a customer‑facing role in cyber intelligence and cyber operations.
• Experience working with security operations functions such as SOC tier 1/2, hunt teams, executive managers, CISO.
• Experience working in a government or military environment, developing cyber threat intelligence for network, host and log analysis, to enable the detection and response to cyber threats.
• Experience analyzing Indicators of Compromise (IOCs) including sandbox output.

• Experience in leveraging CTI to describe, track and develop new intelligence on advanced persistent threats.
• Experience with network IDS monitoring, EDR solutions, SIEM and Security Orchestration, Automation and Response (SOAR) integration, and managing and contributing CTI into a Threat Intelligence platform.
• Experience conducting or supporting incident response and investigations within enterprise environments.
• Experience in SOC operations, threat hunting, detection engineering and SOC workflow optimization.
• Understanding of core cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.
• Eligibility and willingness to undergo Security Checked (SC) security clearance, and ability to maintain it.

In this role, you will be onsite 3‑4 days per week and embedded with a customer several days per week. You will leverage Google’s cyber threat intelligence to enable network defenders and customer CTI teams to defend against threats they face, supporting customers’ SOC, threat hunters, detection engineers and CTI analysts. You will be supported by a network of colleagues across Google Threat Intelligence and contribute to Google’s pool of technical skills and CTI knowledge.

Netherlands: €114,000 – €117,000 (EUR) + 15% bonus target + equity + benefits.

• Serve as the Advanced Intelligence Access (AIA) integrator for a customer.
• Build understanding of the customer’s CTI requirements; identify needs and opportunities for deployment of CTI within their operations to have the greatest defensive impact.
• Track, research and contribute CTI analysis within Google Threat Intelligence of the customer's priority threat concerns.
• Support the integration of CTI into the customer's security processes and technologies, including SIEM and Threat Intelligence Platform (TIP) systems.
• Generate CTI and perform analysis of customer data, taking bespoke sources to identify threat activity, or building and automating investigative workflows.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents‑to‑be, criminal histories consistent with legal requirements, or any other basis protected by law.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc.

stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.

English proficiency is a requirement for all roles unless otherwise stated in the job posting.