Senior Cloud Security & AppSec Strategist

Google; United States; Hybrid; USD 138,000 - 200,000; Full time

Job summary

Mandiant, part of Google Cloud, seeks a Senior Strategic Security Consultant to lead security programs for clients, focusing on Applied Security and Vulnerability Management. You will design secure SDLC roadmaps, establish policies, and collaborate with clients to implement continuous security testing across cloud and on‑prem platforms.

Projects range from startups to Fortune 100 companies; travel up to 30% may be required depending on client needs.

Qualifications

• Bachelor’s degree or equivalent practical experience in relevant field.
• 5 years of experience assessing and developing cyber-security solutions across security domains.
• 5 years of experience delivering cyber outcomes and identifying mission risks.
• Ability to travel up to 30% of the time.

Responsibilities

• Lead strategic security consulting engagements and risk-reduction roadmaps for cloud and on‑prem environments.
• Architect secure Developer Security Operations pipelines and integrate automated security gates into workflows.
• Establish governance structures and risk-tiering workshops across multi-cloud and legacy infrastructure.
• Support threat modeling (STRIDE) and early SDLC security reviews with engineering teams.
• Map Software Bill of Materials (SBOM) and advise on AppSec deployment and supply chain risks.

Skills

Cyber-security strategy

Security risk assessment

Security program development

Travel readiness

Education

Bachelor's degree in Computer Science, Information Systems, Cyber-security, related technical field, or equivalent practical experience

Tools

SAST

DAST

SCA

Qualys

Tenable

Snyk

Checkmarx

Job description

Mandiant, part of Google Cloud, seeks a Senior Strategic Security Consultant to lead security programs for clients, focusing on Applied Security and Vulnerability Management. You will design secure SDLC roadmaps, establish policies, and collaborate with clients to implement continuous security testing across cloud and on‑prem platforms.

Projects range from startups to Fortune 100 companies; travel up to 30% may be required depending on client needs.