About the job

As a Principal Security Consultant focusing on security engineering, you will be a trusted advisor and thought leader, with an experience of building trust by embedding security at the core of digital transformations. In this role, you will lead strategic security transformation initiatives for our clients, working with cross-functional Google and partner teams. You will be instrumental in enabling our clients as they modernise security and securely modernise, through your expertise in areas including Application Security (App Sec), Cloud Security, Dev Sec Ops, and Secure Software Development (S-SDLC).Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

• Lead and manage consulting engagements to build and transform cyber security programs. Drive security outcomes by engaging with and influencing executives and the management across our clients, partners, and Google.

• Provide strategic advice and thought leadership on secure digital transformation, building an excellent culture of security, and managing security risks during digital transformations as organisations adopt new technologies and architecture frameworks.

• Contribute to global thought leadership and capability building to advance Mandiant’s offerings in securing digital transformations.

• Lead the high-profile security transformation programs requiring an expertise, ensuring projects adhere to methodologies and quality standards, and managing the full project life-cycle.

• Lead the business development initiatives, encompassing customer relationship management, responding to requests for proposal, scoping, and developing statements of work.

Minimum qualifications

• Bachelor’s degree in Information Security, Computer Science, a related field, or equivalent practical experience.

• 8 years of experience designing and leading the security transformation programs (e.g., transforming legacy on-premises security to cloud-native Dev Sec Ops models) and security programs (people, process and governance, technology) that enable the digital transformation initiatives.

• Ability to travel up to 30% of the time as needed.

Preferred qualifications

• Certification in one or more of the following: ISACA (AAISM, CISM); ISC2 (CCSP, CISSP, CSSLP); SANS-GIAC (GASAE, GCAD, GCLD, GCSA, GPCS, GSLC, GWEB); Google Professional Cloud Security Engineer.

• Experience assessing, designing, and implementing security of critical enterprise workloads on public and hybrid cloud environments.

• Experience embedding automated security controls (e.g, SAST, DAST, SCA) in CI/CD pipelines, Kubernetes, secrets management, and Agile development workflows to enable security and developer velocity.

• Experience in threat modeling, secure architecture design, code reviews, and modern application paradigms (e.g., containers, microservices).