Application Security Consultant – Cloud & Threat Defense

About the role

The Application Security Consultant will join Mandiant Consulting’s Google Cloud practice to help clients protect their web, mobile, and API assets. You will work on high‑profile engagements, delivering assessments, threat hunting, and incident response while communicating findings to both technical teams and executive leadership.

Key responsibilities

• Perform web, mobile (iOS/Android), and API security assessments following OWASP standards.
• Develop and execute red‑team scenarios, EDR evasion techniques, and exploit development to test client defenses.
• Produce detailed reports and executive‑level presentations that translate technical findings into actionable recommendations.
• Collaborate with cross‑functional teams to design and implement security controls across cloud and on‑prem environments.
• Contribute to the creation and enhancement of security tooling and automation scripts.

Required profile

• Bachelor’s degree in Cybersecurity or equivalent practical experience.
• At least 3 years of hands‑on experience in three or more of the following: web application security, mobile application security, API security, red‑team assessments, EDR evasion, exploit development, cloud security, or social engineering.
• Proven ability to communicate complex security concepts to technical and executive audiences.
• Experience with operating‑system security on Linux and other platforms.

Required skills

• Offensive security tools: Burp Suite Professional, Burp extensions, Postman, Nuclei, ffuf, sqlmap.
• Programming/scripting languages: Python, C#, C/C++, Rust, Nim.
• Security standards: OWASP WSTG/ASVS, OWASP Top 10, OWASP API Top 10, OWASP MASVS/MASTG.
• Certifications (preferred): BSCP, OSWE, eWPTX, eMAPT, 8ksec CMSE, relevant SANS courses.
• Strong knowledge of cloud environments, particularly Google Cloud.