Senior Remediation Architect, Mandiant STS

Mandiant is seeking a highly technical Security Architecture Consultant with advanced communication, engineering, and end-to-end project management skills. In this role, you will be a trusted delivery partner for organizations undergoing massive infrastructure shifts or looking to validate their structural defenses against sophisticated threat actors. You will be comfortable managing technical projects, leading architecture workstreams, and translating deep technical details into clear business terms for management and engineering teams alike. Your ability to quickly parse complex network topologies, identify trust boundaries, and project-manage remediation blueprints will be essential to client success. In this role, you will need to travel up to 30% and support business operations as required.Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Manage the primary engagement for security architecture reviews and design projects, meticulously defining project requirements, managing scope, tracking schedules, and coordinating deliverables to ensure successful project execution. Review, assess, and design secure enterprise-wide architectures across on-premises, cloud, and hybrid environments, providing advanced technical guidance on network segmentation, identity perimeters, and infrastructure hardening. Evaluate and advise on the secure deployment of modern workloads, specifically focusing on cloud-native ecosystems and the secure integration of Artificial Intelligence (AI) platforms and pipelines. Apply advanced security concepts to perform threat modeling on complex systems, identifying design flaws and providing actionable, structural recommendations to mitigate risk. Collaborate with and advise executive organizational and technical stakeholders, translating complex architectural risks into clear, strategic guidance to inform executive decision-making.

Minimum qualifications: Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related technical field, or equivalent practical experience. 5 years of experience designing, evaluating, or leading enterprise security architecture programs and managing delivery teams. Experience applying advanced enterprise security controls, network engineering concepts, and identity management frameworks. Preferred qualifications: Relevant industry certifications (e.g., CISSP, CCSP, Google Cloud Certified Professional Cloud Security Engineer, or equivalent). Experience with threat modeling methodologies (e.g., STRIDE, PASTA) and application security perimeters. Proven experience managing project life-cycles, establishing scope boundaries, tracking engineering milestones, and delivering complex client reports on time. Direct experience building or securing AI/ML pipelines, utilizing AI security frameworks (e.g., OWASP Top 10 for LLMs, NIST AI RMF), or configuring secure cloud AI environments. Strong experience securing multi-cloud environments and reviewing Infrastructure as Code (IaC) templates.