Mandiant Security Consulting Services ensures the long-term success of our clients by providing talented, passionate, and specialized security expertise. Our Consultants partner with our clients to evaluate, create, develop, improve, and mature information security operations and programs. By utilizing the latest industry standards and combining experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, we are able to develop defense forward information security programs for our clients.
As a Senior Strategic Security Consultant, you will be responsible for helping our clients assess, design and build effective cyber security programs. As an established trusted advisor and cyber security program thought leader, you will span operational, technical, and strategic levels and tasks that address difficult cyber security problems that businesses are facing when building out and improving their security programs. This is an opportunity for you to showcase your strong communication skills and experience in security governance, security risk management, security operations, security architecture, and cyber incident response programs.
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.US: $138000 - $200000 (USD) + 15% bonus target + equity + benefits
Learn more about benefits at Google.
Responsibilities
- Lead consulting engagement workstreams to build and transform cyber security programs and capabilities across multiple cybersecurity domains and focus areas.
- Guide clients on transforming cyber defense capabilities and managing risks across cloud and on-premises environments during digital transformation.
- Develop program business strategies and roadmaps for Application Security and Vulnerability Management technologies across cloud and on-premises environments.
- Facilitate advanced AI/ML threat modeling (e.g., OWASP Top 10 for LLMs) to secure generative AI deployments, MLOps pipelines, and autonomous agents.
- Support business development by collaborating with internal sales teams and Mandiant clients to scope and propose bespoke Mandiant strategic security services to address client cybersecurity risks.
Minimum qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
- 5 years of experience in cyber security and security analysis, including the implementation of security controls and developing technical documentation, reports, or assessments
- 5 years of experience assessing and developing cybersecurity solutions and programs across security domains.
- 5 years of experience in delivering cyber outcomes, identifying mission risks, and devising solutions.
- Ability to travel up to 30%.
Preferred qualifications:
- MBA or Master’s degree in Information Systems, Information Security, Cybersecurity, Computer Science, a related technical field, or equivalent practical experience.
- 5 years of experience developing strategic roadmaps to drive large-scale cybersecurity program transformations.
- 3 years of experience enhancing cyber defense capabilities (e.g., SIEM/SOC, security logging, and threat detection).
- 3 years of experience in application security, focusing on identifying and remediating threats.
- 1 year of experience in assessing and developing security strategies for AI/ML systems or deploying AI/ML systems to protect against cyber risk.
- Security related certifications (e.g., CISSP, CISM, GCIH, etc.).