Senior AppSec Strategy & Vulnerability Architect

Google Inc.; New York, Atlanta (NY, GA); On-site; USD 138,000 - 200,000; Full time

Benefits offered by this job

Equity

15% bonus target

Benefits

Job summary

Google Cloud's Mandiant team seeks a Senior Strategic AppSec Consultant to lead engagements focused on application security and vulnerability management. You will drive roadmaps, policies, and secure SDLC enhancements across cloud and on-prem environments, partnering with clients to implement continuous security testing and governance.

You will collaborate with cross-functional teams, map application landscapes, and advance AI/ML threat modeling to secure GenAI deployments and MLSecOps

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience assessing and developing application security (AppSec) programs and vulnerability management architectures.
• 5 years of experience in the delivery of cyber outcomes, identification of mission risks, and development of solutions.
• Ability to travel up to 30% of the time.

Responsibilities

• Lead security engagements and establish Vulnerability Management governance, remediation SLAs, and continuous scanning strategies.
• Architect secure DevSecOps pipelines by seamlessly integrating SAST, DAST, and SCA tooling, and map application landscapes to address supply chain risks.
• Facilitate advanced AI/ML threat modeling (e.g., OWASP Top 10 for LLMs) to secure generative AI deployments, MLOps pipelines, and autonomous agents.
• Conduct comprehensive architecture security reviews and gap analyses to mitigate risks during digital transformations and define metrics for risk reduction.
• Collaborate with engineering teams to advise on enterprise vulnerability scanners, implement actionable mitigation strategies, and evaluate AI-driven security tooling.

Skills

AppSec program experience

Vulnerability management

Security architecture

DevSecOps integration

Education

Bachelor's degree in CS / IS / Cybersecurity or related field

Tools

SAST

DAST

SCA

Job description

Google Cloud's Mandiant team seeks a Senior Strategic AppSec Consultant to lead engagements focused on application security and vulnerability management. You will drive roadmaps, policies, and secure SDLC enhancements across cloud and on-prem environments, partnering with clients to implement continuous security testing and governance.

You will collaborate with cross-functional teams, map application landscapes, and advance AI/ML threat modeling to secure GenAI deployments and MLSecOps