About the job

As a Principal Cyber Security Consultant, you will initially be dedicated to a 1-year transformation project on a strategic account, covering security control deployment across multiple security domains (Asset Discovery, Endpoint Security, Attack Surface Management, Identity and Privileged Access Management, Security Detection, and Incident Response). This role offers the unique opportunity to drive a long-term strategic initiative from inception to operational maturity.

Upon completion of this 1-year engagement, you will transition into our core Strategic Consulting practice. As an established trusted advisor and thought leader, you will span operational, technical, and strategic levels to address complex security problems for a portfolio of clients.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cyber security expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
The US base salary range for this full-time position is $164,000-$243,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.

Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.

Responsibilities

• Develop roadmaps and recommendations to drive client enhancements of their cloud security architecture, governance, and standards.

• Identify, incorporate, and articulate cloud security best practices such as Developer Security Operations Strategy, Zero Trust Design, and Cloud Incident Response.

• Perform security configuration reviews for common cloud-based Software-as-a-Service (SaaS) platforms.

Minimum qualifications

• Bachelor's degree in Computer Science, Information Systems, Cyber Security, related technical field, or equivalent practical experience.

• 8 years of experience assessing and developing cyber security solutions and programs across security domains.

• 8 years of experience in delivering cyber outcomes, identifying mission risks, and devising solutions.

• Ability to travel up to 30% of the time as required.

• Ability to communicate in English fluently to work with internal partners and customer teams.

Preferred qualifications

• Experience working with decentralized IT teams to troubleshoot implementation blockers and drive remediation without direct administrative control.

• Experience rolling out security controls in distributed or heterogeneous environments according to industry standards.

• Knowledge of infrastructure, operating system and application vulnerabilities, security architecture, and controls.

• Knowledge of technologies used in pen testing, security event analysis, incident response, computer forensics, network and endpoint architecture, or other Security Operation areas.

• Ability to successfully interface (verbal and written) with clients in a concise manner.