Senior Cyber Defense Analyst

Why Mobility Global? At Mobility Global, our mission is to provide trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we're creating new opportunities for our customers, our business, and our people.

Role Summary This role reports to the Manager, Threat Management Center and operates within Google SecOps, our unified SIEM and case management platform. You will partner closely with Cyber Defense Engineering, Cyber Threat Intelligence, and Advanced Threat Operations during incident response, exercise significant independent judgment on incidents affecting multiple teams and systems, and mentor other responders across the function.

Key Responsibilities

• Serve as the Threat Management Center's subject matter expert for incident response, leading end-to-end investigation, containment, eradication, and recovery for confirmed security incidents.
• Validate and provide feedback on findings from the AI Alert Triage and Investigation Agent, helping tune agent logic and strengthen the handoff between autonomous triage and human-led response.
• Lead incident command for significant and multi-system incidents, coordinating with Cyber Defense Engineering, Cyber Threat Intelligence, Advanced Threat Operations, IT, and business stakeholders as needed.
• Exercise significant independent judgment to scope, prioritize, and direct the response strategy for complex or ambiguous incidents escalated from automated detection.
• Own and lead investigations into insider risk and fraud cases end to end, partnering with Insider Threat Engineering, Legal, and HR on findings and remediation.
• Define, mature, and lead continuous improvement of the incident response SOPs, runbooks, and playbooks that set the standard for the broader team.
• Author detailed root cause analyses and lessons-learned reports for significant incidents, and present findings and remediation recommendations to engineering and leadership.
• Partner with Advanced Threat Operations on complex, multistage investigations requiring forensic analysis, threat hunting, or malware reverse engineering, contributing incident context and supporting coordinated remediation.
• Build trusted partnerships with Cyber Defense Engineering, translating incident findings into improved detection content, data quality, and SIEM onboarding.
• Partner with Cyber Threat Intelligence to incorporate adversary TTPs and indicators into active investigations and influence detection priorities.
• Mentor and develop other incident responders within the Threat Management Center, building technical capability and response consistency across the team.

…