Strategic AppSec Consultant: Vulnerability & DevSecOps Lead

Google; Cambridge (MA); On-site; USD 120,000 - 200,000; Full time

Benefits offered by this job

Equity

Bonus target 15%

Benefits package

Job summary

Google's Mandiant division seeks a Senior Strategic AppSec Consultant to lead engagements enhancing secure SDLC and vulnerability management across cloud and on-prem environments. You will shape policies, roadmaps, and risk-based security controls in collaboration with clients.

Your work includes guiding threat modeling, DevSecOps integration, and Secure Coding practices while aligning with industry best practices like the NIST AI RMF.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience assessing and developing application security (AppSec) programs and vulnerability management architectures.
• 5 years of experience in the delivery of cyber outcomes, identification of mission risks, and development of solutions.
• Ability to travel up to 30% of the time.

Responsibilities

• Lead security engagements and establish Vulnerability Management governance, remediation SLAs, and continuous scanning strategies.
• Architect secure DevSecOps pipelines by seamlessly integrating SAST, DAST, and SCA tooling, and map application landscapes to address supply chain risks.
• Facilitate advanced AI/ML threat modeling to secure generative AI deployments, MLOps pipelines, and autonomous agents.
• Conduct comprehensive architecture security reviews and gap analyses to mitigate risks during digital transformations and define metrics for risk reduction.
• Collaborate with engineering teams to advise on enterprise vulnerability scanners, implement actionable mitigation strategies, and evaluate AI-driven security tooling.

Skills

AppSec program experience

Vulnerability management

Threat modeling

Travel readiness

Education

Bachelor's degree in CS or related field

Tools

SAST tooling

DAST tooling

SCA tooling

Job description

Google's Mandiant division seeks a Senior Strategic AppSec Consultant to lead engagements enhancing secure SDLC and vulnerability management across cloud and on-prem environments. You will shape policies, roadmaps, and risk-based security controls in collaboration with clients.

Your work includes guiding threat modeling, DevSecOps integration, and Secure Coding practices while aligning with industry best practices like the NIST AI RMF.