Application Security Consultant - Google Cloud Mandiant Consulting

About the Role

Join the Google Cloud Mandiant Consulting team as an Application Security Consultant based in Doha, Qatar, with an option to choose your preferred working location among Dubai (UAE), Doha (Qatar), or Riyadh (Saudi Arabia). In this position, you will provide expert cybersecurity consulting services, focusing on offensive security to help clients proactively prepare for, detect, and respond to cyber threats.

Google Cloud’s Mandiant team is a global leader in cyber defense, threat intelligence, and incident response, backed by extensive frontline experience and advanced threat insights.

Key Responsibilities

• Perform detailed security assessments on web, API, and mobile applications, identifying and exploiting vulnerabilities in line with industry standards such as OWASP WSTG, OWASP API Security Top 10, and OWASP MASVS/MASTG.
• Discover and weaponize critical application vulnerabilities to test client defenses.
• Enhance team capabilities through building security tools, conducting research on offensive tactics, integrating threat intelligence, and sharing knowledge via presentations.
• Create thorough and precise reports and presentations tailored for technical teams and executive leadership, acting as a trusted security advisor.
• Lead project scoping, engagement management from kickoff through remediation, and mentor junior team members.

Minimum Qualifications

• Bachelor's degree in Cybersecurity focused on offensive security, or equivalent hands-on experience.
• A minimum of 3 years’ experience in at least three areas including web/mobile/API security assessments, red team operations, EDR evasion, exploit development, cloud security, social engineering, scripting, or tool development.
• Proven expertise in delivering technical and executive-level reporting and presentations.
• Experience with operating system security, particularly Linux or cross-operating system environments.

Preferred Qualifications

• Certifications such as BSCP, OSWE, eWPTX, eMAPT, 8ksec CMSE, or relevant SANS courses.
• Hands-on experience crafting security tools and familiarity with programming languages like Python, C#, C/C++, Rust, or Nim.
• Practical knowledge in conducting web, API, and mobile security assessments using recognized frameworks and in utilizing penetration testing tools such as Burp Suite Professional, Postman, nuclei, ffuf, and sqlmap.

Additional Information

Google is an equal opportunity employer committed to creating an inclusive environment, respecting diversity and considering all qualified candidates regardless of race, gender, religion, disability, or veteran status. Reasonable accommodations are available for candidates with disabilities.