Senior Security Architect, Mandiant Consulting, Google Cloud (English, Spanish)
- linkCopy link
- emailEmail a friend
Remote locations: Florida, USA; United States.
Minimum qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
- 5 years of experience designing, evaluating, or leading enterprise security architecture programs and managing delivery teams.
- Experience applying advanced enterprise security controls, network engineering concepts, and identity management frameworks.
- Ability to communicate in English and Spanish fluently to support client relationship management in this region.
Preferred qualifications:
- Relevant industry certifications (e.g., CISSP, CCSP, Google Cloud Certified Professional Cloud Security Engineer, or equivalent).
- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) and application security perimeters.
- Experience managing project life-cycles, establishing scope boundaries, tracking engineering milestones, and delivering complex client reports on time.
- Experience building or securing AI/ML pipelines, utilizing AI security frameworks (e.g., OWASP Top 10 for LLMs, NIST AI RMF), or configuring secure cloud AI environments.
- Experience securing multi-cloud environments (GCP, Cloud Computing Platform) and reviewing Infrastructure as Code (IaC) templates.
About the job
As a part of the Mandiant’s Security Transformation Services (STS) team, you will help organization build an effective security operations program that minimizes organizational risk and reduces the impact of security breaches. You will utilize the latest industry standards, combine experience and knowledge gained from Mandiant Incident Response, Intelligence and Managed Defense practices, able to help clients contain security events, harden their environments, and transform their security programs. You will act as the organization's primary remediation leader both during and after a cyber security incident and will be responsible for driving remediation efforts by developing, coordinating, and executing the eradication, recovery, and remediation plan in parallel with active incident response. In this role, you will partner with key stakeholders, including the Incident Response (IR) team, IT operations, business units, and legal, to ensure that containment, eradication, and recovery actions are unified, efficient, and aligned with business priorities. You will work with clients in similar scope on long term or strategic security transformation projects in addition to IR engagements.
Mandiant is seeking a highly technical Security Architecture Consultant with advanced communication, engineering, and end-to-end project management skills. In this role, you will be a trusted delivery partner for organizations undergoing massive infrastructure shifts or looking to validate their structural defenses against sophisticated threat actors. You will be comfortable managing technical projects, leading architecture workstreams, and translating deep technical details into clear business terms for management and engineering teams alike. Your ability to quickly parse complex network topologies, identify trust boundaries, and project-manage remediation blueprints will be essential to client success.
US: $138000 - $200000 (USD) + 15% bonus target + equity + benefits
Learn more about benefits at Google.
Responsibilities
- Manage security architecture reviews and design projects as the primary engagement lead, defining project requirements, scope, schedules, and deliverables to ensure successful execution.
- Design secure enterprise-wide architectures across on-premises, cloud, and hybrid environments, delivering advanced technical guidance on network segmentation, identity perimeters, and infrastructure hardening.
- Evaluate the secure deployment of modern workloads, with a focus on cloud-native ecosystems and the secure integration of Artificial Intelligence (AI) platforms and pipelines.
- Conduct threat modeling on complex systems by applying advanced security concepts, identifying design flaws, and delivering actionable, structural risk-mitigation recommendations.
- Advise executive organizational and technical stakeholders by translating complex architectural risks into clear, strategic guidance to inform executive decision-making.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.
Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.