Senior Cybersecurity Strategy Consultant, AI, TVM, AppSec, and Advisory

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience in advisory or consulting roles within professional services or cybersecurity consulting firms.
• Experience implementing practices to mitigate cybersecurity risks in domains such as AI, TVM, Application Security, cloud security, network security, identity and access management, and cyber defence.
• Experience implementing practices around cyber risks and cloud security for clients’ cloud security frameworks using industry standards.
• Experience with AI evaluation frameworks, production guardrails, and Google Cloud’s AI ecosystem.

Preferred qualifications

• Experience in incident response, pen testing, threat modeling, or artificial intelligence security.
• Experience in cybersecurity operations (SOC, Incident Response, or Detection Development) utilizing SIEM and SOAR platforms.
• Experience in the Open Web Application Security Project (OWASP) Top 10, Common Weakness Enumeration (CWE), Threat Modeling Methodologies, and integrating security controls into Agile and Developer Security Operation environments.

About the job

As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. You will have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.

As a Security Consultant, you could work on engagements, including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

Canada: $166000 - $170000 (CAD) + 15% bonus target + equity + benefits

Learn more about benefits at Google .

Responsibilities

• Direct Cyber Strategy and Target Operating Model (TOM) development, maturity assessments, and digital transformation initiatives to deliver risk-reduction roadmaps across cloud and on-premises environments.
• Architect innovative AI and automation strategies to enhance threat detection, incident response, threat vulnerability management (TVM), and overall cyber defense capabilities.
• Design technical blueprints and integrate automated, AI-driven security gates, threat modeling, and architecture assessments seamlessly into developer workflows and CI/CD pipelines.
• Design and facilitate incident response simulations, tabletop exercises, and client workshops to evaluate readiness, test controls, and align executive stakeholders.
• Assess client requirements, scope consulting efforts, calculate engagement costs, and coordinate cross-functional solution architectures to deliver detailed proposals and statements of work (SOWs).