Principal Consultant, AI Security Solutions, Agentic Cyber Defense

Google uses AI tools to facilitate candidate evaluation as part of our recruitment processes.

This job posting is for a new vacant position.

Note: When applying for this position, you can indicate your preferred location from the following options: Toronto, ON, Canada; Montreal, QC, Canada; Ottawa, ON, Canada.

Minimum Qualifications

• Bachelor's degree in computer science, information systems, cybersecurity, or a related technical field, or equivalent practical experience
• Five years of experience in detection development, SIEM/SOAR administration, or security operations center (SOC) operations
• Experience in detection development, automated response playbooks, and custom scripting (e.g., Python, Bash)
• Experience in AI-augmented SOC workflows, agentic security, or using large language models to automate security operations
• Experience in integrating distributed systems via Cloud or REST APIs
• Ability to travel up to 30% of the time, as needed

Preferred Qualifications

• Experience in developing and deploying detection and response content within modern SIEM solutions (e.g., SecOps, Elastic, Sentinel, Splunk, Cortex XSIAM)
• Experience in creating MCP protocol servers and transparently integrating complex distributed systems via Cloud APIs
• Experience in Python development and designing multi-agent systems, RAG pipelines, and LLM tool calls
• Experience in consulting services and client communication
• Familiarity with AI evaluation frameworks, production safeguards, and Google Cloud's AI ecosystem
• Experience in cybersecurity operations (SOC, incident response, or detection development) using SIEM and SOAR platforms

About this job

As a Security Consultant, you will be responsible for helping clients effectively prepare for cybersecurity threats, proactively mitigate them, and detect and respond to them. Security Consultants have a strong understanding of computing, operating system features, and networking, cloud services, enterprise networking environments, and how to apply these to cybersecurity threats.

As a Security Consultant, you may be tasked with helping clients manage technically complex and highly publicized tech incidents, perform criminal investigations, hunt threats, and triage malware. You may also test clients' networks, applications, and devices by emulating the latest techniques to help them defend against threats. You will be the client's technical defender in matters of information security requirements and provide them with a deep understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors, and effectively lead complex projects within cross-functional teams.

As a Principal Consultant, you will design and develop agentic capabilities within clients' Security Operations Centers. By collaborating with clients' developers and analysts, you will translate security operations workflows into reliable AI-augmented systems, implementing agentic capabilities within clients' environments. This role is designed for technical professionals who focus on emerging technologies and protecting clients against cybersecurity risks.

Mandiant is part of Google Cloud and is a renowned leader in dynamic cyber defense, threat intelligence, and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and business leaders worldwide. Our combination of firsthand, recognized experience in responding to some of the most complex breaches, state-level threat intelligence, and artificial intelligence is associated with the best security validation in the industry, ensuring that Mandiant is more up-to-date on current advanced threats than any other actor.

The base Canadian salary for this full-time position is Canada: $166,000 - $170,000 (CAD) + 15% bonus target + equity + benefits CAD, determined by role, level, and location. Individual compensation is determined by additional factors, including job-related skills, experience, and relevant education or training.

Learn more about benefits at Google.

Responsibilities

• Analyze clients' security operations performance and workflows to identify operational issues and areas that could be measurably improved through technology implementation
• Propose innovative AI and automation strategies that optimize global defense capabilities
• Develop robust internal AI solutions, query pipelines, and MCP connectors to transparently integrate intelligent agents with leading enterprise security platforms, including SIEM and SOAR solutions
• Design, create, and maintain an internal library of agentic solutions and reusable skills that transform manual security operations into efficient, automated, and semi-automated workflows
• Design and integrate enhanced AI detection use case lifecycles, agentic response guides, and threat hunting procedures at machine speed
• Operationalize advanced security orchestration, automation, and response (SOAR) capabilities, including connector integration for automated case management

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.