Google

Runs Search and YouTube and builds Gemini AI

Senior Cybersecurity Strategy Consultant - Multiple Teams

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-time

About the Job

Requirements

A bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
Five years of experience in advisory or consulting roles within professional services or cybersecurity consulting firms.
Experience implementing practices to mitigate cybersecurity risks in areas such as artificial intelligence, threat vulnerability management, application security, cloud security, network security, identity and access management, and cyber defense.
Experience implementing practices addressing cyber risks and cloud security for clients’ cloud security frameworks using industry standards.
Experience with artificial intelligence evaluation frameworks, production guardrails, and Google Cloud’s artificial intelligence ecosystem.
Understanding of computer science, operating system functionality, networking, cloud services, corporate network environments, and applying this knowledge to cybersecurity threats.

Responsibilities

Direct cyber strategy and Target Operating Model development, maturity assessments, and digital transformation initiatives to deliver risk-reduction roadmaps across cloud and on-premises environments.
Architect artificial intelligence and automation strategies to enhance threat detection, incident response, threat vulnerability management, and cyber defense capabilities.
Design technical blueprints and integrate automated, artificial intelligence-driven security gates, threat modeling, and architecture assessments into developer workflows and continuous integration/continuous delivery pipelines.
Design and facilitate incident response simulations, tabletop exercises, and client workshops to evaluate readiness, test controls, and align executive stakeholders.
Assess client requirements, scope consulting efforts, calculate engagement costs, and coordinate cross-functional solution architectures to deliver detailed proposals and statements of work.
Help clients prepare for, proactively mitigate, detect, and respond to cybersecurity threats.
Assist clients in navigating technically complex and high-profile incidents, and perform forensic analysis, threat hunting, and malware triage on engagements.
Test client networks, applications, and devices by emulating current techniques to help clients defend against threats.
Advocate for information security requirements and provide in-depth information security domain expertise.
Articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors, and lead complex engagements.

Desired Qualifications

Experience in incident response, penetration testing, threat modeling, or artificial intelligence security.
Experience in cybersecurity operations, including security operations centers, incident response, or detection development, using security information and event management and security orchestration, automation, and response platforms.
Experience with the Open Web Application Security Project Top 10, Common Weakness Enumeration, threat modeling methodologies, and integrating security controls into Agile and developer security operations environments.

Direct Cyber Strategy and Target Operating Model (TOM) development, maturity assessments, and digital transformation initiatives to deliver risk-reduction roadmaps across cloud and on-premises environments.
Architect innovative AI and automation strategies to enhance threat detection, incident response, threat vulnerability management (TVM), and overall cyber defense capabilities.
Design technical blueprints and integrate automated, AI-driven security gates, threat modeling, and architecture assessments seamlessly into developer workflows and CI/CD pipelines.
Design and facilitate incident response simulations, tabletop exercises, and client workshops to evaluate readiness, test controls, and align executive stakeholders.
Assess client requirements, scope consulting efforts, calculate engagement costs, and coordinate cross-functional solution architectures to deliver detailed proposals and statements of work (SOWs).

Minimum qualifications:

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
5 years of experience in advisory or consulting roles within professional services or cybersecurity consulting firms.
Experience implementing practices to mitigate cybersecurity risks in domains such as AI, TVM, Application Security, cloud security, network security, identity and access management, and cyber defence.
Experience implementing practices around cyber risks and cloud security for clients’ cloud security frameworks using industry standards.
Experience with AI evaluation frameworks, production guardrails, and Google Cloud’s AI ecosystem.

Preferred qualifications:

Experience in incident response, pen testing, threat modeling, or artificial intelligence security.
Experience in cybersecurity operations (SOC, Incident Response, or Detection Development) utilizing SIEM and SOAR platforms.
Experience in the Open Web Application Security Project (OWASP) Top 10, Common Weakness Enumeration (CWE), Threat Modeling Methodologies, and integrating security controls into Agile and Developer Security Operation environments.

As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. You will have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.

As a Security Consultant, you could work on engagements, including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

Canada: $166000 - $170000 (CAD) + 15% bonus target + equity + benefits

Learn more about benefits at Google.This posting is for a new vacancy.

Google utilizes AI tools to assist in assessing candidates in our hiring processes.

Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Toronto, ON, Canada; Calgary, AB, Canada; Ottawa, ON, Canada; Vancouver, BC, Canada; Montreal, QC, Canada.

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
5 years of experience in advisory or consulting roles within professional services or cybersecurity consulting firms.
Experience implementing practices to mitigate cybersecurity risks in domains such as AI, TVM, Application Security, cloud security, network security, identity and access management, and cyber defence.
Experience implementing practices around cyber risks and cloud security for clients’ cloud security frameworks using industry standards.
Experience with AI evaluation frameworks, production guardrails, and Google Cloud’s AI ecosystem.

About the Company

Google

Runs Search and YouTube and builds Gemini AI

Google runs the world's most used search engine and free services such as YouTube, Android, and Gmail, and it builds the Gemini AI models that work inside them. In 2017, its researchers invented the transformer, the neural network design behind ChatGPT and most other AI chatbots. People use these services without paying, and Google earns most of its money from ads placed beside search results and YouTube videos. Businesses rent computing power and Gemini models through Google Cloud, and Google also sells subscriptions and Pixel phones. Larry Page and Sergey Brin founded Google in 1998 as Stanford PhD students; it is based in Mountain View, California, United States, and is the main business of parent company Alphabet.

Company size: 10,001+
Company stage: IPO
Headquarters: Mountain View, CA
Founded: 1998

Recently Posted Jobs

Explore more opportunities at Google

See more jobs