Senior Cybersecurity Strategy Consultant, AI, TVM, AppSec, and Advisory
- linkCopy link
- emailEmail a friend
Minimum qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
- 5 years of experience in advisory or consulting roles within professional services or cybersecurity consulting firms.
- Experience implementing practices to mitigate cybersecurity risks in domains such as AI, TVM, Application Security, cloud security, network security, identity and access management, and cyber defence.
- Experience implementing practices around cyber risks and cloud security for clients’ cloud security frameworks using industry standards.
- Experience with AI evaluation frameworks, production guardrails, and Google Cloud’s AI ecosystem.
Preferred qualifications:
- Experience in incident response, pen testing, threat modeling, or artificial intelligence security.
- Experience in cybersecurity operations (SOC, Incident Response, or Detection Development) utilizing SIEM and SOAR platforms.
- Experience in the Open Web Application Security Project (OWASP) Top 10, Common Weakness Enumeration (CWE), Threat Modeling Methodologies, and integrating security controls into Agile and Developer Security Operation environments.
About the job
As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. You will have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
As a Security Consultant, you could work on engagements, including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements.
Canada: $166000 - $170000 (CAD) + 15% bonus target + equity + benefits
Learn more about benefits at Google.
Responsibilities
- Direct Cyber Strategy and Target Operating Model (TOM) development, maturity assessments, and digital transformation initiatives to deliver risk-reduction roadmaps across cloud and on-premises environments.
- Architect innovative AI and automation strategies to enhance threat detection, incident response, threat vulnerability management (TVM), and overall cyber defense capabilities.
- Design technical blueprints and integrate automated, AI-driven security gates, threat modeling, and architecture assessments seamlessly into developer workflows and CI/CD pipelines.
- Design and facilitate incident response simulations, tabletop exercises, and client workshops to evaluate readiness, test controls, and align executive stakeholders.
- Assess client requirements, scope consulting efforts, calculate engagement costs, and coordinate cross-functional solution architectures to deliver detailed proposals and statements of work (SOWs).
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.
Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.