Senior Consultant, AI Security Solutions – Google (Mandiant) – Toronto, ON

Mandiant, part of Google Cloud, is looking for a Senior Consultant, AI Security Solutions to join its Agentic Cyber Defense practice. This is a high-impact technical role based in Toronto, Ottawa, or Montreal, sitting at the intersection of artificial intelligence and cybersecurity operations — two of the fastest-moving domains in the industry today.

In this position, you’ll work directly with enterprise clients to design and build agentic AI capabilities inside their Security Operations Centres (SOCs). That means translating complex security workflows into intelligent, automated systems — and doing it at a level of sophistication that very few organizations in the world are attempting. If you thrive on solving technically challenging problems while advising senior stakeholders, this role delivers both.

About the Role: Senior Consultant, AI Security Solutions

Day-to-day, you’ll engage with client teams to assess security operations performance, identify workflow gaps, and propose AI and automation strategies that meaningfully improve their defences. You’ll design and develop agentic solutions, build MCP connectors, construct prompt pipelines, and integrate intelligent agents with enterprise platforms like SIEM and SOAR solutions. You’ll also contribute to an internal library of reusable agentic skills and automated response playbooks that accelerate delivery across engagements.

Beyond the technical build work, you’ll serve as a credible voice in the room — articulating complex cybersecurity concepts to executive leadership, technical contributors, and business stakeholders alike. Expect to work across cross-functional teams, support incident response engagements, and occasionally travel (up to 30% of the time) to support client work on-site. Mandiant’s reputation is built on frontline experience with some of the world’s most complex breaches, and the work you do here contributes directly to that legacy.

Benefits and Salary

This role comes with a competitive compensation package. The salary range in Canada is $166,000 – $170,000 CAD, with a 15% bonus target, equity, and a comprehensive Google benefits package. Individual pay is determined by job-related skills, experience, and relevant education or training. For a full overview of what Google offers, you can visit Google’s benefits page.

Responsibilities

This role centres on building next-generation agentic security capabilities for enterprise clients. You’ll work hands-on with client developers and analysts to engineer AI-augmented security workflows — moving organizations from manual, reactive operations toward intelligent, automated defences. The scope of this work spans technical architecture, development, and client-facing advisory.

• Analyze customer security operations performance and workflows to identify inefficiencies and areas for improvement through technology
• Propose innovative AI and automation strategies that optimize overall defence capabilities across the client’s security environment
• Develop robust internal AI solutions, prompt pipelines, and MCP connectors to integrate intelligent agents with enterprise SIEM and SOAR platforms
• Design and build a reusable library of agentic solutions and skills that transform manual SOC workflows into automated and semi-automated processes
• Integrate AI-augmented detection use-case lifecycles, agentic response playbooks, and machine-speed threat hunting procedures
• Operationalize advanced security orchestration, automation, and response (SOAR) capabilities, including automated case management connectors

Requirements / Skills

This role is designed for technically deep professionals who are equally comfortable writing code and presenting to a CISO. The ideal candidate brings hands-on experience in SOC operations or detection development alongside genuine expertise in AI/ML tooling and automation. Google values both the technical foundation and the ability to communicate clearly in client-facing environments.

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related technical field (or equivalent practical experience)
• 5+ years of experience in detection development, SIEM/SOAR administration, or SOC operations
• Detection development and scripting experience — Python, Bash, and automated response playbooks
• AI-augmented SOC workflows — experience with agentic security or using LLMs to automate security operations
• Cloud API and REST integration experience across distributed systems
• Preferred: Experience with modern SIEM platforms (e.g., SecOps, Elastic, Sentinel, Splunk, Cortex XSIAM), building MCP servers, and designing multi-agent systems or RAG pipelines
• Preferred: Background in client-facing consulting and familiarity with Google Cloud’s AI ecosystem

How to Apply

To apply, use the official Google Careers link below. Make sure your resume is up to date and reflects your experience in SOC operations, AI automation, and detection engineering before submitting.

Share This Opportunity

Know someone who might be interested? Share this job posting and help them join Google (Mandiant) in Toronto.