Application Security Consultant – Cloud & Application Security

About the role

As an Application Security Consultant you will help clients prepare for, mitigate, detect, and respond to cyber‑security threats across web, mobile, and API environments. You will work within the Google Cloud practice of Mandiant Consulting, delivering technical expertise and strategic guidance to high‑profile engagements.

Key responsibilities

• Perform security assessments of web applications, mobile apps (iOS/Android), and APIs using industry standards such as OWASP WSTG, ASVS, Top 10, and API Top 10.
• Develop and present detailed reports and executive‑level presentations on findings, risk remediation, and security posture.
• Assist clients during complex incidents, including forensic analysis, threat hunting, and malware triage.
• Design and prototype security tools or scripts to automate testing and improve assessment efficiency.
• Collaborate with cross‑functional teams to align security recommendations with business objectives.

Required profile

• Bachelor’s degree in Cybersecurity or equivalent practical experience.
• At least 3 years of experience in three or more of the following: web, mobile, or API security assessments; red‑team engagements; exploit development; cloud security; or EDR evasion.
• Proven ability to communicate technical concepts to both technical and executive audiences.
• Experience with operating‑system security on Linux and other platforms.

Required skills

• Offensive security techniques and scripting (Python, C#, C/C++, Rust, Nim).
• Proficiency with Burp Suite Professional, Burp extensions, Postman, nuclei, ffuf, sqlmap.
• Familiarity with OWASP standards (WSTG, ASVS, Top 10, API Top 10, MASVS/MASTG).
• Certifications such as BSCP, OSWE, eWPTX, eMAPT, 8ksec CMSE are a plus.