Senior Consultant, Security Architecture, Mandiant Consulting

Mandiant’s Security Transformation Services (STS) helps organizations build resilient security operations programs that minimize risk and blunt the impact of breaches. Focusing on both on-premises and cloud architecture, our consultants guide clients through the entire lifecycle of defense—from initial assessments and on-site workshops to configuration reviews of security controls. We translate Mandiant’s frontline intelligence into practical, technical recommendations that harden environments, enhance visibility, and fundamentally improve the processes required to reduce the risk of compromise.

Beyond proactive architecture hardening, we serve as the primary incident remediation architects during and after high-pressure cyber incidents.This role offers an opportunity to master technical security architecture while leading global organizations through their most critical security transformations.

As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud platform architecture, corporate enterprise architecture, and how to apply this knowledge to cyber security threats. You will drive the "road to recovery" by developing and executing eradication and recovery plans in parallel with active incident response.

In this role, you will assist clients navigate, remediate, and recover from technically complex and high-profile incidents, perform proactive security assessments, and be the technical advocate for information security requirements and best practices. You will articulate and present complex concepts to business stakeholders, executive leadership, and technical teams.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.

US: $138000 - $201000 (USD) + 15% bonus target + equity + benefits

Learn more about benefits at Google.

Responsibilities

• Lead, coordinate, and conduct technical security assessments for cloud-based security infrastructures and platforms.
  
• Assist clients with designing and implementing architecture enhancements, security configurations, identity protections, cloud workflows, and appropriate counter measures to defend against threats and attacker techniques.
  
• Build scripts, tools, or methodologies to enhance Mandiant's on-premise Active Directory or Cloud Assessment processes.
  
• Develop and present comprehensive and accurate reports, training, and presentations for technical and executive audiences.
  
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences. Communicate strategies and roadmap initiatives to client stakeholders including technical staff, executive leadership, and legal counsel.

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
• 5 years of experience with information security, engineering, and cloud-based infrastructure environments.
• 4 years of experience with identity and access management, directory services, cloud computing platforms, network security, and cloud architecture.
• Ability to travel up to 25% of the time.

Preferred qualifications:

• Proficiency in the end-to-end attack lifecycle and TTPs (Tactics, Techniques, and Procedures), combined with experience supporting incident response efforts in both cloud and on-premises environments.
  
• Proficiency in drafting "approach papers" and translating technical findings into actionable executive reports, including the creation of custom dashboards to track security posture improvements.
  
• Strong technical understanding of network topology, common security controls, and the risks associated with Zero Trust, IAM, and APIs.
  
• Ability to explain complex technical details concisely and communicate remediation recommendations and strategies to technical staff, executive leadership, and legal counsel.
  

Note: Google's hybrid workplace includes remote roles. By applying to this position you will have an opportunity to share your preferred working location from the following:

Remote locations: California, USA; United States.

Applicants in the County of Los Angeles: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Applicants in San Francisco: Qualified applications with arrest or conviction records will be considered for employment in accordance with the San Francisco Fair Chance Ordinance for Employers and the California Fair Chance Act.

The application window will be open until at least July 03, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.