Senior AppSec Strategy Lead - Vulnerability & DevSecOps

Google; Reston (VA); On-site; USD 138,000 - 200,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Google Cloud's Mandiant team seeks a Senior Strategic AppSec Consultant to lead engagements focusing on application security and vulnerability management across cloud and on-prem environments.

You will develop roadmaps, implement continuous security testing, and align policies with industry best practices (NIST AI RMF), working across cross-functional teams to improve secure software delivery.

Qualifications

• Bachelor's degree or equivalent practical experience in a technical field.
• 5 years of experience assessing and developing AppSec programs and vulnerability management architectures.
• 5 years of experience delivering cyber outcomes and risk mitigation solutions.
• Ability to travel up to 30% of the time.

Responsibilities

• Lead security engagements and establish Vulnerability Management governance, remediation SLAs, and continuous scanning strategies.
• Architect secure DevSecOps pipelines by integrating SAST, DAST, and SCA tooling across landscapes.
• Facilitate advanced AI/ML threat modeling to secure generative AI deployments and MLOps pipelines.
• Conduct architecture security reviews and gap analyses to mitigate risks during transformations and define risk-reduction metrics.
• Collaborate with engineering teams to advise on enterprise scanners and implement mitigation strategies, including AI-driven tooling.

Skills

AppSec strategy

Vulnerability management

DevSecOps

Threat modeling

AI security

Education

Bachelor's degree or equivalent practical experience

Tools

SAST

DAST

SCA

LLM security

Job description

Google Cloud's Mandiant team seeks a Senior Strategic AppSec Consultant to lead engagements focusing on application security and vulnerability management across cloud and on-prem environments.

You will develop roadmaps, implement continuous security testing, and align policies with industry best practices (NIST AI RMF), working across cross-functional teams to improve secure software delivery.