Senior Remediation Architect, Mandiant STS
Summary
A senior security architecture consultant within Google Cloud's Mandiant who leads client engagements for security architecture reviews, threat modeling, and remediation design across on-premises, cloud, and hybrid environments, while managing project delivery and advising executives. Core focus: enterprise security controls, network segmentation, identity frameworks, cloud-native and AI/ML pipeli
- Manage the primary engagement for security architecture reviews and design projects, meticulously defining project requirements, managing scope, tracking schedules, and coordinating deliverables to ensure successful project execution.
- Review, assess, and design secure enterprise-wide architectures across on-premises, cloud, and hybrid environments, providing advanced technical guidance on network segmentation, identity perimeters, and infrastructure hardening.
- Evaluate and advise on the secure deployment of modern workloads, specifically focusing on cloud-native ecosystems and the secure integration of Artificial Intelligence (AI) platforms and pipelines.
- Apply advanced security concepts to perform threat modeling on complex systems, identifying design flaws and providing actionable, structural recommendations to mitigate risk.
- Collaborate with and advise executive organizational and technical stakeholders, translating complex architectural risks into clear, strategic guidance to inform executive decision-making.
Minimum qualifications:
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related technical field, or equivalent practical experience.
- 5 years of experience designing, evaluating, or leading enterprise security architecture programs and managing delivery teams.
- Experience applying advanced enterprise security controls, network engineering concepts, and identity management frameworks.
Preferred qualifications:
- Relevant industry certifications (e.g., CISSP, CCSP, Google Cloud Certified Professional Cloud Security Engineer, or equivalent).
- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) and application security perimeters.
- Proven experience managing project life-cycles, establishing scope boundaries, tracking engineering milestones, and delivering complex client reports on time.
- Direct experience building or securing AI/ML pipelines, utilizing AI security frameworks (e.g., OWASP Top 10 for LLMs, NIST AI RMF), or configuring secure cloud AI environments.
- Strong experience securing multi-cloud environments and reviewing Infrastructure as Code (IaC) templates.