Senior Cybersecurity Strategy Consultant, AI, TVM, AppSec, and Advisory

Google LLC; Toronto, Calgary; Vor Ort; CAD 166.000 - 170.000; Vollzeit

Benefits dieser Stelle

Bonus target

Equity

Benefits

Zusammenfassung

Google LLC is seeking a Senior Cybersecurity Strategy Consultant to help clients prepare for, mitigate, and respond to cyber threats with a focus on AI, TVM, AppSec, and advisory services. You will influence risk reduction across cloud and on‑prem environments and work with executive stakeholders to translate complex security concepts into actionable plans.

The role involves leading engagements, threat modelling, and incident response readiness with close collaboration across Google Cloud and

Qualifikationen

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience in advisory or consulting roles within professional services or cybersecurity consulting firms.
• Experience implementing practices to mitigate cybersecurity risks in AI, TVM, AppSec, cloud/security, network, IAM and cyber defence.
• Experience implementing practices around cyber risks and cloud security for clients’ cloud security frameworks using industry standards.
• Experience with AI evaluation frameworks, production guardrails, and Google Cloud’s AI ecosystem.
• Experience in OWASP Top 10, CWE, threat modeling, and integrating security controls into Agile DevOps environments.

Aufgaben

• Direct Cyber Strategy and Target Operating Model development across cloud and on‑premises environments.
• Architect AI and automation strategies to enhance threat detection, incident response, TVM, and cyber defence capabilities.
• Design blueprints and integrate automated, AI‑driven security gates into developer workflows and CI/CD pipelines.
• Design and facilitate incident response simulations, tabletop exercises, and client workshops.
• Assess client requirements, scope consulting efforts, calculate engagement costs, and coordinate solution architectures for proposals and SOWs.

Kenntnisse

Advisory/consulting experience

AI/TVM/AppSec security

Cloud security

Threat modeling

Incident response (preferred)

Penetration testing (preferred)

Ausbildung

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related technical field

Jobbeschreibung

Senior Cybersecurity Strategy Consultant, AI, TVM, AppSec, and Advisory

Share Senior Cybersecurity Strategy Consultant, AI, TVM, AppSec, and Advisory

X This posting is for a new vacancy. Google utilizes AI tools to assist in assessing candidates in our hiring processes.
Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Toronto, ON, Canada; Calgary, AB, Canada; Ottawa, ON, Canada; Vancouver, BC, Canada.

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
  
• 5 years of experience in advisory or consulting roles within professional services or cybersecurity consulting firms.
  
• Experience implementing practices to mitigate cybersecurity risks in domains such as AI, TVM, Application Security, cloud security, network security, identity and access management, and cyber defence.
• Experience implementing practices around cyber risks and cloud security for clients’ cloud security frameworks using industry standards.
• Experience with AI evaluation frameworks, production guardrails, and Google Cloud’s AI ecosystem.

Preferred qualifications:

• Experience in incident response, pen testing, threat modeling, or artificial intelligence security.
  
• Experience in cybersecurity operations (SOC, Incident Response, or Detection Development) utilizing SIEM and SOAR platforms.
  

Experience in the Open Web Application Security Project (OWASP) Top 10, Common Weakness Enumeration (CWE), Threat Modeling Methodologies, and integrating security controls into Agile and Developer Security Operation environments.

About the job

As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. You will have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.

As a Security Consultant, you could work on engagements, including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone. Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

Canada: $166000 - $170000 (CAD) + 15% bonus target + equity + benefits

Learn more about benefits at Google .

• Direct Cyber Strategy and Target Operating Model (TOM) development, maturity assessments, and digital transformation initiatives to deliver risk-reduction roadmaps across cloud and on-premises environments.
• Architect innovative AI and automation strategies to enhance threat detection, incident response, threat vulnerability management (TVM), and overall cyber defense capabilities.
• Design technical blueprints and integrate automated, AI-driven security gates, threat modeling, and architecture assessments seamlessly into developer workflows and CI/CD pipelines.
• Design and facilitate incident response simulations, tabletop exercises, and client workshops to evaluate readiness, test controls, and align executive stakeholders.
• Assess client requirements, scope consulting efforts, calculate engagement costs, and coordinate cross-functional solution architectures to deliver detailed proposals and statements of work (SOWs).

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy , Know your rights: workplace discrimination is illegal , Belonging at Google , and How we hire .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.