Application Security Consultant Google Cloud Mandiant Consulting📣 Job Ad

About the Role

Google is seeking a full-time Application Security Consultant to join its Mandiant Consulting team in Riyadh, Saudi Arabia. In this role, you will provide cybersecurity consulting services and support to clients, focusing on assessing and advising on both technical and process-based controls for various environments. This position is integral to helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats.

Role Context and Impact

As a Security Consultant, you will apply your understanding of computer science, operating system functionality, networking, cloud services, and corporate network environments to address cyber security challenges. Mandiant, a part of Google Cloud, is recognized for its leadership in dynamic cyber defense, threat intelligence, and incident response. The team leverages frontline experience, nation-state grade threat intelligence, machine intelligence, and security validation to provide deep knowledge of advanced threats. You will serve as a technical advocate for information security requirements, offering in-depth understanding of the domain, articulating complex concepts to diverse stakeholders, and leading complex engagements with cross-functional teams.

Key Responsibilities

• Conduct comprehensive security assessments of Web applications, APIs, and Mobile applications, identifying, exploiting, and validating vulnerabilities using industry-standard methodologies such as OWASP WSTG, OWASP API Security Top 10, and OWASP MASTG.
• Discover critical vulnerabilities in applications and develop methods to leverage them.
• Expand the team’s capabilities through tool creation, research on offensive techniques, incorporation of threat actor intelligence, internal presentations, and knowledge sharing.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences.
• Act as a trusted advisor to C-level executives, security leaders, and other customer stakeholders.
• Assist with scoping prospective engagements, lead teams for engagements from kickoff through the remediation phase, and mentor other staff.

Minimum Qualifications

• Bachelor's degree in Cybersecurity with a focus on offensive security, or equivalent practical experience.
• 3 years of experience in at least three of the following security areas: web application security assessment, mobile application security assessment, API security assessment, red team assessments, EDR evasion, exploit development, cloud, social engineering, scripting, or tool development.
• Experience delivering reports and presentations to both technical and executive audiences.
• Experience with operating system security across various operating systems or Linux.

Preferred Qualifications

• Certifications related to application security, including BSCP, OSWE, eWPTX, eMAPT, 8ksec CMSE, or relevant SANS courses.
• Experience in creating security tools and understanding of underlying programming languages such as Python, C#, C/C++, Rust, or Nim.
• Experience conducting web application, API, and mobile (iOS and Android) security assessments following industry standards such as OWASP WSTG/ASVS, OWASP Top 10, OWASP API Top 10, and OWASP MASVS/MASTG.
• Experience with web application and API penetration testing tooling, including Burp Suite Professional, Burp Suite extensions, Postman, nuclei, ffuf, and sqlmap.

Work Environment and Collaboration

This is a full-time position where you will engage with clients to navigate technically complex and high-profile incidents, perform forensic analysis, threat hunting, and malware triage. You will also test client networks, applications, and devices by emulating the latest techniques to enhance their defense against threats. The role involves working collaboratively within cross-functional teams and contributing to the development of team capabilities through research and knowledge sharing.