In this role, you will be responsible for architecting and building the intelligent agents, skills, and tooling required to automate and accelerate operations within a Cyber Defense Center (CDC). Collaborating with Mandiant architects, analysts, and client stakeholders, you will translate complex security workflows into reliable AI systems and deliver these directly into client engagements. You will maintain the operational readiness of critical AI infrastructure including agents and MCP servers while staying current on the evolving agentic AI and LLM landscape. We seek technical experts passionate about emerging technologies and protecting our clients from cyber threats.Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.Individual pay is determined by factors including job-related skills, experience, and relevant education or training.
US: $168000 - $244000 (USD) + 20% bonus target + equity + benefits
Learn more about benefits at Google.
Responsibilities
- Analyze customer Cyber Defense Centers (CDC) to uncover complex operational issues, formulating and executing innovative AI and automation strategies that optimize overall defense capabilities.
- Design, build, and maintain intelligent agents and reusable skills that creatively transform manual security operations such as alert triage and threat hunting into highly efficient, automated workflows.
- Develop internal AI frameworks, prompt pipelines, and MCP connectors to seamlessly integrate intelligent agents with core enterprise security platforms like SIEM and SOAR.
- Architect evaluation processes and security controls to safeguard internal and client-facing AI systems against adversarial risks, including prompt injection and data leakage.
- Author comprehensive documentation and runbooks to empower consulting teams, while continuously tracking the rapidly evolving agentic AI landscape to drive practical improvements.
Qualifications
Minimum qualifications:
- Bachelor's in Computer Science, Cybersecurity, or equivalent work experience.
- 8 years of experience in assessing and developing multi-domain IT or security solutions.
- Experience using AI platforms to build Generative AI agents to modernize legacy workflows.
- Experience with Python.
- Experience integrating distributed systems via Cloud APIs or REST.
Preferred qualifications:
- Bachelor's degree in Computer Science, Electrical Engineering, or a related technical field.
- Experience building MCP servers and seamlessly integrating complex distributed systems via Cloud APIs.
- Client-facing consulting experience with exceptional communication skills, adept at translating complex AI concepts for non-technical stakeholders.
- Deep background in cybersecurity operations (SOC, Incident Response, or Detection Engineering) utilizing SIEM and SOAR platforms.
- Familiarity with AI evaluation frameworks, production guardrails, and Google Cloud’s AI ecosystem.
- Advanced Python engineering skills, demonstrating creative problem-solving in designing multi-agent systems, RAG pipelines, and LLM tool-calling.