Senior Application Security Consultant – Google Mandiant – Ontario, BC, AB, QC

Mandiant, part of Google Cloud, is on the lookout for a Senior Application Security Consultant to join their elite proactive services team — and this role is fully remote eligible across Canada, including Ontario, Alberta, British Columbia, and Quebec. If you thrive in high-stakes cybersecurity environments and are passionate about staying ahead of adversaries, this could be your next career-defining move.

In this role, you’ll be at the front lines of web application security assessments, external penetration testing, and mobile application testing, all while helping clients proactively defend against sophisticated cyber threats. You’ll work alongside cross-functional teams, contribute to tool development, and share your expertise through research and internal knowledge-sharing — all in one of the most respected names in cybersecurity consulting.

About the Role: Senior Application Security Consultant

As a Senior Application Security Consultant at Mandiant, you’ll be responsible for helping clients prepare for, mitigate, and respond to cyber security threats. This encompasses a broad range of technical engagements — from navigating complex incidents and performing forensic analysis to emulating the latest attacker techniques during network and application assessments. You’ll also be a key voice in translating complex security concepts for both technical contributors and executive leadership.

Beyond client engagements, you’ll actively expand your team’s capabilities through offensive security tool creation, research into emerging attack techniques, and the incorporation of threat actor intelligence. Collaboration and mentorship are central to the role — you’ll be expected to drive progress and support more junior team members as the team grows.

Benefits and Salary

Google offers a competitive compensation package for this full-time senior position. The Canada base salary range is CAD $152,000–$156,000, in addition to bonus, equity, and a comprehensive benefits package. Google is well known for its outstanding employee benefits, which you can explore directly on their benefits page. This is a genuinely strong total compensation offering for a seasoned cybersecurity professional.

Responsibilities

This role demands a hands-on approach to offensive security testing and client advisory. Day-to-day, you’ll be conducting technical security assessments, crafting detailed reports, and engaging stakeholders at every level — from developers to C-suite executives. Here’s a closer look at what you’ll be doing:

• Conduct high-quality external network and web application assessments independently, with an active role in cloud and mobile application testing
• Develop comprehensive and accurate reports and presentations tailored to both technical and executive audiences
• Recognize and apply attacker tactics, techniques, and procedures in a safe and controlled manner
• Communicate findings and strategic recommendations to client stakeholders, including technical staff, executive leadership, and legal counsel
• Expand the team’s capabilities through tool creation, research on offensive techniques, and incorporation of threat actor intelligence
• Share knowledge through internal presentations and mentoring of more junior team members
• Travel up to 20% of the time to support client engagements as needed

Requirements / Skills

The ideal candidate brings a strong foundation in application security and hands-on experience with offensive security methodologies. Mandiant values professionals who are curious, technically rigorous, and capable of communicating complex ideas clearly to diverse audiences. Here’s what you’ll need to succeed:

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience
• 5+ years of experience with techniques and tools used for web application security assessment or mobile security assessment
• 5 years of experience assessing and developing cybersecurity solutions across multiple security domains (preferred)
• Offensive security certifications such as OSWE, BSCP, CWEE, OSCP, or relevant SANS courses (preferred)
• 2 years of experience with bug bounty programs (preferred)
• Experience in four or more of the following: application security, offensive security testing, application development, source code review, exploit development, network protocols, or system and network administration (preferred)
• Background in security consulting and/or software or web development (preferred)

How to Apply

Ready to bring your application security expertise to one of the most respected cybersecurity teams in the world? Apply directly through Google’s official careers portal to be considered for this Senior Application Security Consultant position with Mandiant. Make sure your resume highlights your relevant security assessment experience and any certifications that showcase your offensive security capabilities.

Share This Opportunity

Know someone who might be interested? Share this job posting and help them join Google Mandiant in this exciting remote role across Canada.