Senior AppSec Strategy Lead: DevSecOps, VM & GenAI Security

Google; United States; On-site; USD 138,000 - 200,000; Full time

Job summary

Google Cloud, via Mandiant, seeks a Senior Strategic AppSec Consultant to lead advisory engagements focused on Application Security and Vulnerability Management. You will develop roadmaps and policies to strengthen secure SDLCs and implement continuous security testing across cloud and on‑prem environments.

You will collaborate with cross‑functional teams to implement security controls and mature vulnerability management programs, while aligning with industry best practices including NIST AI RMF.

Qualifications

• Bachelor's degree or equivalent practical experience in CS/InfoSec.
• 5 years of experience in AppSec programs and vulnerability management architectures.
• 5 years delivering cyber outcomes and risk‑driven solutions.
• Ability to travel up to 30% of the time.

Responsibilities

• Lead security engagements and establish Vulnerability Management governance and remediation SLAs.
• Architect secure DevSecOps pipelines with SAST/DAST/SCA tooling across landscapes.
• Facilitate AI/ML threat modeling for GenAI deployments and autonomous agents.
• Conduct architecture security reviews and define risk-reduction metrics.
• Collaborate with engineering to advise on scanners, mitigations, and AI-driven tooling.

Skills

AppSec programs

Vulnerability management

DevSecOps

SAST/DAST/SCA

AI/ML security

Threat modeling

OWASP Top 10

CWE methodologies

Stakeholder communication

Education

Bachelor's degree in CS/InfoSec or related field

Job description

Google Cloud, via Mandiant, seeks a Senior Strategic AppSec Consultant to lead advisory engagements focused on Application Security and Vulnerability Management. You will develop roadmaps and policies to strengthen secure SDLCs and implement continuous security testing across cloud and on‑prem environments.

You will collaborate with cross‑functional teams to implement security controls and mature vulnerability management programs, while aligning with industry best practices including NIST AI RMF.