senior application security consultant

LanceSoft Middle East

<div>
 
 We have an immediate opportunity for "
 
 Senior Consultant - Security"
 
 . Please let me know if you're interested kindly send me your CV to
 
 kirthika.r@lancesoft.com
 
 
 
 
 
 
 
 🚀Title: Senior Consultant - Security
 
 
 
 
 📍Location : Riyadh - onsite
 
 
 
 
 🗓Duration : 6 months of contract
 
 
 
 
 ⏰ Notice Period: Immediate joiner or up to 30 days
 
 
 
 
 
 
 
 🔒 Key Requirements:
 
 
 
 
 
 
 
 ** Must Have DRAGOS Certification **
 
 
 
 
 
 <ul>
 <li>
 
 Overall Experience:
 
 Minimum
 
 3+ years
 
 of professional experience in cybersecurity.
 </li>
 <li>
 
 OT/ICS Experience:
 
 Minimum
 
 2 years
 
 of direct, hands-on experience in OT/ICS security, preferably within the Oil &amp; Gas, Power &amp; Utilities, or manufacturing sectors.
 </li>
 <li>
 
 Consulting Background:
 
 Experience in a consulting or professional services environment is highly advantageous.
 </li>
 <li>
 
 Education:
 
 Bachelor&rsquo;s degree in Engineering (Electrical, Computer, Mechatronics), Computer Science, or a related technology field.
 </li>
 <li>
 
 Certifications:
 
 Professional qualifications such as
 
 GICSP, ISA/IEC 62443
 
 , or other relevant technical certs (e.g., vendor-specific) are strongly preferred.
 </li>
 </ul>
 
 
 
 
 
 🔒 Key Responsibilities:
 
 
 
 As a Senior Consultant, your primary role is the hands-on delivery of our OT security services. You will be the technical expert executing fieldwork, analyzing data, and finding vulnerabilities. You will be responsible for the quality of your own work and for supporting your team managers in delivering exceptional results.
 
 
 
 
 <ul>
 <li>
 
 Execute Technical Delivery:
 
 Perform hands-on OT security assessments, including device configuration reviews, network traffic analysis, and technical audits against security standards.
 </li>
 <li>
 
 Implement Solutions:
 
 Participate in the deployment, configuration, and testing of OT security tools and controls (e.g., firewalls, endpoint protection, network monitoring sensors).
 </li>
 <li>
 
 Analyze &amp; Report:
 
 Collect and analyze technical data from diverse OT sources, identify risks and vulnerabilities, and draft clear, concise, and evidence-based findings for client reports.
 </li>
 <li>
 
 Support the Team:
 
 Work closely with your Assistant Manager and Manager to deliver high-quality work products on time and provide technical support to junior consultants.
 </li>
 <li>
 
 Stay Current:
 
 Continuously build your technical skills and stay updated on the latest OT/ICS threats, vulnerabilities, technologies, and standards.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 🔒 Requirements:
 
 
 <ul>
 <li>
 
 Frameworks and Standards:
 
 </li>
 <li>
 Strong knowledge of
 
 NCA (ECC, OTCC), NIST CSF &amp; SP800-82, IEC 61511/IEC 61508, and the ISA/IEC 62443 series.
 
 </li>
 <li>
 Practical experience
 
 using
 
 these standards as a benchmark for technical assessments and configuration audits.
 </li>
 <li>
 
 OT/ICS Systems &amp; Protocols:
 
 </li>
 <li>
 Hands-on experience with industrial components (PLCs, RTUs, HMIs) from vendors like
 
 Honeywell, Siemens, Yokogawa, GE, ABB, or Schneider Electric
 
 .
 </li>
 <li>
 Ability to
 
 analyze
 
 industrial network traffic (e.g., using Wireshark) and identify protocols like
 
 Modbus, DNP3/IEC104, IEC61850, Profinet, and OPC
 
 .
 </li>
 <li>
 
 OT Security Architecture &amp; Networking:
 
 </li>
 <li>
 Strong understanding of network fundamentals (TCP/IP, routing, switching) in an OT context.
 </li>
 <li>
 Practical experience in
 
 analyzing
 
 firewall rulebases and network diagrams to verify segmentation and identify security gaps.
 </li>
 <li>
 
 Security Solutions &amp; Tools:
 
 </li>
 <li>
 
 Monitoring &amp; Detection:
 
 Hands-on experience
 
 deploying
 
 or
 
 operating
 
 passive network monitoring tools.
 </li>
 <li>
 
 SIEM:
 
 Experience
 
 configuring
 
 log collection from OT assets and assisting with rule-tuning in leading platforms.
 </li>
 <li>
 
 Protection:
 
 Hands-on experience with endpoint hardening, baseline configuration, and executing patch management and backup/recovery procedures in OT environments.
 </li>
 <li>
 
 Risk &amp; Vulnerability Management:
 
 </li>
 <li>
 Proven ability to
 
 execute
 
 technical vulnerability assessments, including safe use of scanners in OT-sensitive zones.
 </li>
 <li>
 Experience performing manual configuration reviews of industrial assets and Windows-based OT systems (e.g., HMIs, engineering workstations).
 </li>
 <li>
 Support risk management activities in controlled workshops.
 </li>
 </ul>
 
 
 
 
 
 
 
 
 Interested candidates send me your Cv along with below details:
 
 
 
 Expected salary:
 
 
 Visa/ Work Permit:
 
 
 Notice Period:
 
 
 Current Location:
 
</div>

Senior Consultant - Security

Deloitte

<div>Cloud Security Architect - Senior Consultant 
 
Position Summary
 
 
Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities? If so, Deloitte &amp; Touche LLP could be the place for you. Traditional security programs have often been unsuccessful in unifying the need to both secure and support technology innovation required by the business. Join Deloitte's Cloud Cyber Services team and become a member of the largest group of cybersecurity professionals worldwide. 
 
Recruiting for this role ends on 5/1/2026 
 
Work you'll do
 
 
Deloitte has an opening for a Cloud Security Architect (Senior Consultant) The cloud security architect plays an integral role in defining and assessing the client organization's cloud security strategy, architecture and practices. This individual's primary function is to provide cloud security planning, deployment and review expertise to project teams and client organizations in the Cyber space. Responsibilities include: 
<ul><li>
Lead/provide technical guidance and solutioning for the delivery of Cloud Cyber Risk projects in a project manager and or architect role, overseeing the activities of onsite and offshore engineers and architects across 8 key cyber domains: Governance, Identity, Application Security, PaaS security, Infrastructure security, Security Monitoring, Resilience and Data protection
</li><li>Assist in business development activities such as defining scope of services, building resource estimates and related pricing, packaging proposals and supporting the delivery of the proposal to the client for AWS, GCP, Azure and/or Oracle Cloud services
</li><li>Function as key client point of contact interface building rapport and trust with the client
</li><li>Function as a technical specialist in CNAPP, CWPP and CSPM technologies and security risk frameworks relevant to cloud as well as the industry leading benchmarks
</li><li>Lead the generation of all project deliverables such as assessment reports, system designs/ architectures and risk/security recommendations
</li><li>Maintain strong domain knowledge of multi-hyperscaler cloud solutions and security concepts and technologies
</li><li>Assist clients with security frameworks, cloud configuration standards and resolving cloud vulnerabilities
</li><li>Lead the execution of cloud security engagements during different phases of the lifecycle - assess, design, and implementation.
</li><li>Lead engagements to perform technical health checks for cloud platforms/environments prior to broader deployments.
</li><li>Oversee technical support for AWS, GCP, Azure and/or Oracle cyber services and resolve service-related issues through research and troubleshooting and working with vendors.
</li><li>Conduct cloud security analysis, recommendations and configurations of prospective clients' platforms and environments based on Deloitte's Cloud Cyber Risk Framework.
</li><li>Perform technical health checks for these cloud platforms/environments prior to broader deployments including DevSecOps and CI/CD pipelines
</li><li>Experience with and leading use of leading cyber tooling for cloud such as Wiz and Snyk</li><li>
Support proof of concept and production deployments of these cloud technologies for AWS, GCP, Azure, Oracle, Wiz and/or Snyk</li><li>
Assist clients with transitions to using cloud services such as tenant setup and service configuration, focused on cloud cyber risk mitigation. Additional technologies include: MFA, SSO, Conditional Access, PIM, Security Operations tooling and scanning solutions.</li><li>
Assist clients with the deployment of third-party technologies to assist in securing the cloud platform such as firewall, WAF, PAM and cloud workload protection.</li><li>
Assist clients with configuration and delivery of cloud security and compliance reports.</li>
<li>Provide technical support for AWS, Azure, GCP, Oracle, Wiz, Snyk and third-party security services and resolve service-related issues through research and troubleshooting and working with third-party vendors.</li>
<li>Implementation of industry leading practices around Azure, AWS, GCP, Wiz, Snyk and cloud security services for clients.</li>
<li>Designing and developing cloud-specific security policies, standards and procedures e.g., tenant, management group and subscription management and configuration, identify management and access control, firewall management, auditing and monitoring, security incident and event management , data protection (DLP, encryption), user and administrator account management, SSO, conditional access controls and password/key management.
</li><li>Troubleshooting system level problems in a multi-vendor, multi-protocol network environment.
</li><li>Documenting platform technical issues, analysis, client communication, and resolution as part of cyber risk mitigation steps.</li>
<li>Executing on cloud security engagements during different phases of the lifecycle - assess, design, and implementation &amp; post implementation reviews.</li>
<li>Implementing industry leading practices around cyber risks and cloud security for clients.</li>
<li>Provide internal cloud and devsecops security technical training to Advisory personnel as needed.</li>
<li>Acting as a subject matter specialist on cloud cyber risk for the cloud platforms.</li>
<li>Contribute to Point-of-Views (PoVs) on providing leading practices to our clients on the cyber challenges they face.</li>
<li>Contribute to eminence activities, such as whitepapers pertaining to cloud security capabilities.</li> 
</ul> 
 
The Team
 
 
Deloitte's Cloud Cyber Risk team helps complex organizations more confidently pursue their growth, innovation and performance agendas through proactive management of the associated cyber risks. Our professionals provide advisory and implementation services that integrate risk, regulatory, and technology skills to help clients transform their legacy programs into proactive Secure.Vigilant.Resilient. TM cyber risk programs. Join the team developing the future state of cyber risk solutions. 
 
Required:
 
<ul><li>BA/BS Degree ideally in Technical Field (ex. Computer Science, Cyber Security, Information Security, Engineering, Information Technology). ; or 4 years equivalent professional experience
</li><li>4+ years of experience in technical consulting, client problem solving, architecting and designing solutions in a consulting role with project leadership and/or architect experience in AWS, GCP, Azure, Oracle, Wiz and/or Snyk ; with a security focus strongly preferred
</li><li>2+ years of hands-on technical experience designing and implementing security solutions for leading Cloud service providers across SPI models and environments (Public, Private, Hybrid)
</li><li>2+ years working experience designing cloud security architectures and strategies for enterprises
</li><li>2+ years working with Cloud security industry standards such as Cloud Security Alliance (CSA), ISO/IEC 27017 and NIST CSF
</li><li>2+ years working experience with Cloud security technologies/vendors (e.g., IAM, SIEM, IDS) and/or providers (e.g., Okta, CipherCloud, AlertLogic), a big plus
</li><li>1+ years working with Cloud orchestration and automation (Continuous Integration and Continuous Delivery (CI/CD)) in single and multi-tenant environments
</li><li>2+ years working with CNAPP, CSPM or CWPP technologies or planning for large-scale deployments of these technologies
</li>Limited sponsorship opportunities may be available 
<li>
</li></ul> 
 
Additional Requirements: 
<ul><li>
Ability to travel up to 80%, on average, based on the work you do and the clients and industries/sectors you serve
</li><li>Locations include: Houston, Dallas, Cleveland, Detroit, St. Louis, Pittsburgh, Boston, Charlotte, Atlanta, Miami, Memphis, Denver, Phoenix, Salt Lake City, Los Angeles, San Diego, San Franciso, Seattle. Must be within a reasonable commute and willing to work part-time in the Deloitte and/or client offices.
</li></ul> 
Preferred:
 
<ul><li>Previous Consulting or Big 4 experience preferred.
</li><li>Industry or Vendor Security Certifications such as CISSP or other cloud architect domains
</li><li>Experience with Virtualization including security for at least one or more of the following: Compute, Network, Storage, End-point, Application
</li><li>Experience designing IAM technologies and services
</li><li>Experience or strong working knowledge of managing enterprise security infrastructure and perimeter security appliances - e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology
</li><li>Experience with Azure data, analytics, or AI/ML services (Azure SQL, HDInsight, Databricks, Data Factory, Data Lake Storage, Azure Analysis Services, Synapse Analytics, Azure Machine Learning, etc.)</li>
Understanding of industry security standards, guidelines and regulatory/compliance requirements related to information security and cloud computing such as ISO 27001, ISO 27018, NIST CSF, NIST 800-53, PCI DSS, SOC2, HIPAA, PCI, SOX, GLBA, etc. 
<li>
</li></ul> 
 
'Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html 
 
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 to $218,600 
 
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.</div>

Cloud Security Architect - Senior Consultant

Amazon Web Services

<div><h2 class="jobSectionHeader">DESCRIPTION</h2>
The Amazon Web Services Professional Services (AWS ProServe) team is seeking a skilled Senior Delivery Consultant to join our Cloud Security team. As a Senior Security Consultant, you&rsquo;ll work closely with customers to design, implement, and automate solutions in AWS to protect customer assets, enable customer security teams to operate more effectively, and ensure customers don&rsquo;t accept unnecessary risk. 
 
You will work in fast-paced, complex projects that focus on delivering transformative business and security outcomes for customers globally. The ideal candidate is a highly skilled technical security professional with the ability to coach and guide executive security and cloud leaders in their journey, addressing topics such as security strategy and optimizing cloud security operations while being able to dive deep into AWS security technology. Along the way, you&rsquo;ll be expected to invent, extend, and adapt technology to tailor solutions to customer needs as well as coach and mentor junior consultants to enable their success. 
 
The AWS Professional Services organization is a global team of experts that help customers realize their desired business outcomes when using the AWS Cloud. We work together with customer teams and the AWS Partner Network (APN) to execute enterprise cloud computing initiatives. Our team provides assistance through a collection of offerings which help customers achieve specific outcomes related to enterprise cloud adoption. We also deliver focused guidance through our global specialty practices, which cover a variety of solutions, technologies, and industries. 
 
Key job responsibilities 
As an experienced technology professional, you will be expected to: 
1. Act as the technical leader for customer engagements and/or the security workstreams of engagements, leading teams of consultants. 
2. Lead internal initiatives to deliver quantifiable impact 
3. Develop strategic relationships with internal and external leaders 
4. Design and implement complex, scalable, and secure AWS solutions tailored to customer needs 
5. Enable and engage delivery partners in project delivery 
6. Provide mentorship and coaching to develop others 
 
A day in the life 
You'll work with colleagues and customers to design, develop and implement security solutions that solve real-world problems. You'll have full access to all of AWS's Infrastructure and Agentic-AI tools. You'll spend your days innovating, building and deploying industry-leading technology.
 
 
About the team 
ABOUT AWS: 
 
Diverse Experiences
 
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 
 
Why AWS
 
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. 
 
Work/Life Balance
 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud. 
 
Inclusive Team Culture
 
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. 
 
Mentorship and Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.<h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>5+ years of cloud architecture and solution implementation experience</li><li>5+ years of external or internal customer facing, complex and large scale project management experience</li><li>Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>3+ years of security, compliance and risk management experience</li><li>5+ years of integration, testing and automation experience</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Knowledge of AWS services including compute, storage, networking, security, databases, machine learning, and serverless technologies</li><li>degree in advanced technology, or AWS Professional level certification</li><li>Knowledge of security and compliance standards including HIPAA and GDPR</li><li>Experience communicating technical concepts to diverse audiences in pre-sales environments</li><li>Experience scripting for automation (e.g., Python, Perl, Ruby)</li><li>Experience in the financial services industry</li><li>Hands-on technical expertise in building security capabilities in code, deploying infrastructure as code, and implementing enterprise security solutions (e.g. WAF, IPS, Anti-DDOS, SIEM)</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, NJ, Jersey City - 169,000.00 - 228,600.00 USD annually 
USA, NY, New York - 169,000.00 - 228,600.00 USD annually</div>

Senior Security Consultant, Global Proserve Security

Fortinet

<div><div>We are looking for a Senior Consultant &ndash; FortiGuard Incident Response to work in a dynamic and exciting new position reporting to the Director of Operations for FortiGuard Security Consulting Services. The analyst will work directly with members of a world class incident response and forensics team. Our team is comprised of individuals with strong knowledge in malware hunting and analysis, reverse engineering, multiple scripting languages, forensics and threat actors TTPs . In this very hands-on customer facing role the consultant&rsquo;s main objective is to lead and manage the incident response engagements and train/mentor other security consultants. Leveraging your in-depth understanding of the threat actors&rsquo; tactics, techniques, procedures and tools as well as our flagship FortiEDR tooling you will need to quickly glean situational awareness to provide guidance to the team members as well as to the client. In addition, from time to time the candidate will help to create threat research work products such as blogs and presentations. To be successful in this role the candidate must be possess strong consulting skills, deep technical skills and able to work under tight timelines. 
</div>Responsibilities:
<ul><li>Assist the IR Lead during engagements and mentoring/training junior analysis
</li><li>Continue to focus on process improvement for the customer facing incident response services
</li><li>Conduct host-based analysis and forensic functions on Windows, Linux, and Mac OS X systems
</li><li>Conduct network forensics and log analysis during IR engagements
</li><li>Review firewall, web, database, and other log sources to identify evidence and artifacts of malicious and compromised activity
</li><li>Leverage our FortiEDR Platform to conduct investigations to rapidly detect and analyze security threats
</li><li>Perform memory forensics and file analysis as needed
</li><li>Monitor underground forums, our FortiGuard Threat Labs, along with other open-source intelligence outlets to maintain proficiency in latest actor tactics and techniques
</li><li>Preform basic reverse engineering of threat actor&rsquo;s malicious tools
</li><li>Develop complete and informative reports and presentations for both executive and technical audience
</li><li>Availability during nights/weekends as needed for IR engagements 
</li></ul>Required Skills:
<ul><li>Excellent written and verbal communication skills a must
</li><li>Experience interfacing with customers
</li><li>Experience with of at least one scripting language: Shell, Ruby, Perl, Python, etc
</li><li>Ability to data mine using YARA, RegEx or other techniques to identify new threats
</li><li>Experienced with EnCase, FTK, X-Ways, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open source forensic tools a plus
</li><li>Experience with malware analysis tools such as IDA Pro, OllyDbg, Immunity Debugger
</li><li>Hands-on experience dealing with APT campaigns, attack Tactics, Techniques and Procedures (TTPs), memory injection techniques, static and dynamic malware analysis and malware persistence mechanism
</li><li>Strong knowledge of operating system internals and endpoint security experience.
</li><li>Able to communicate with both technical and executive personnel
</li><li>Static and dynamic malware and log analysis
</li><li>Analysis of Linux and MAC binary files and the understanding of MAC internals is a plus but not required .
</li><li>Highly motivated, self-driven and able to work both independently and within a team
</li><li>Able to work under pressure in time critical situations and occasional nights and weekends work
</li><li>A solid understanding of Active Directory and how to secure is a plus
</li></ul>Education:
<ul><li>Bachelor&rsquo;s Degree in Computer Engineering, Computer Science or related field
</li><li>Or 5+ years&rsquo; experience with incident response and or Forensics</li></ul></div>

Senior Consultant - FortiGuard Incident Response

Google

<div>Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Dubai - United Arab Emirates; Doha, Qatar; Riyadh Saudi Arabia.<h3 class="jobSectionHeader">
Minimum qualifications:</h3><ul>
<li>Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field or equivalent practical experience.</li>
<li>5 years of experience in three or more of the following security areas: network, red team assessments, EDR evasion, cloud, social engineering, scripting, tool development.</li>
<li>Experience with operating system security across Windows, Linux, or Mac.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul>
<li>Certifications related to offensive security including OSCE, OSEP, OSEE, OSCP, CCSAS, CCT INF or relevant SANS courses.</li>
<li>Experience in payload development, lateral movement, privilege escalation and EDR evasion.</li>
<li>Experience in four or more of the following: network protocols, threat intelligence analysis, system and network administration, project management, developing applications, technical incident response processes, source code review, reverse engineering.</li>
<li>Experience in architecting security tools using programming languages (e.g., Python, C#, C/C++, Rust, Nim or similar).</li>
<li>Knowledge of operating system internals.</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
As a Consultant, you will be responsible for providing cybersecurity consulting services and support to our clients, including assessing and advising clients on both technical and process-based controls for all manner of environments. You will perform Red and Purple team assessments, including adversarial emulation of cyber attacks against customer organizations, and other technical cyber assessments including external engagement, web application, mobile and wireless security testing. You will expand the team&rsquo;s capabilities through tool creation, research on offensive techniques, incorporation of threat actor intelligence, internal presentations and knowledge share. 
In this role, you will develop comprehensive and accurate reports and presentations for both technical and executive audiences, and act as a trusted advisor to C-level, security leaders and other customer stakeholders. You will assist with scoping prospective engagements, leading teams for engagements from kickoff through remediation phase, as well as mentoring other staff.<div><div>
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.</div></div></div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Perform offensive technical cyber security engagements of a varied nature.</li>
<li>Advise clients on security best practices for remediating discovered issues.</li>
<li>Collaborate with internal teams to expand capabilities to deliver further value to clients.</li>
<li>Interface with clients to address concerns, issues, or escalations, track and guide to closure any issues that impact the engagements and its value to clients.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Senior Consultant, Red Team, Google Cloud, Mandiant Consulting

<div>Please note: Applicants to this role must have work authorization in Saudi Arabia as this role is not eligible for work visa sponsorship. 
Note: Google's hybrid workplace includes remote and in-office roles. By applying to this position you will have an opportunity to share your preferred working location from the following: 
 
In-office locations: Riyadh Saudi Arabia. 
Remote location(s): Saudi Arabia.<h3 class="jobSectionHeader">
Minimum qualifications:</h3><ul>
<li>Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related technical field or equivalent practical experience.</li>
<li>5 years of experience assessing and developing cybersecurity solutions across multiple security domains.</li>
<li>Experience in the consumption, processing, and analysis of Cyber Threat Intelligence (CTI) within an operational environment, supporting monitoring, detection, and response.</li>
<li>Experience in an intelligence practitioner role.</li>
<li>Ability to communicate in English and Arabic fluently, as this is a client facing role.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul>
<li>Experience designing instructional materials and fostering a learning environment.</li>
<li>Experience in analyzing network, endpoint, and security logs or telemetry for security investigations and threat hunting.</li>
<li>Ability to approach addressing challenges, committed to enhancing CTI capabilities.</li>
<li>Ability to work in a cross-functional team environment with a focus on knowledge sharing and collaboration.</li>
<li>Ability to teach technical concepts to the audience.</li>
<li>Excellent written and verbal communication skills, with the ability to collaborate with various teams and stakeholders.</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
 
 
As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams. 

In this role, you will act as an advisor and will be responsible for guiding the development of Cyber Threat Intelligence (CTI) functions across the globe and empowering cyber-security organizations to leverage threat intelligence at organizations.<div><div>
Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.</div></div></div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Conduct a comprehensive assessment of the organization's current threat intelligence capabilities, needs, and risks.</li>
<li>Design proactive CTI capabilities based upon discovery activities, in-line with best practices and desired client priorities.</li>
<li>Design and develop a comprehensive CTI training curriculum aligned with the organization's needs and the chosen tools/frameworks.</li>
<li>Deliver engaging training sessions to security analysts, engineers, and other team members on threat intelligence concepts, methodologies, and tools.</li>
<li>Travel to client sites up to 50% of the time as needed to directly engage and deliver intelligence consulting services.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Senior Cyber Threat Intelligence Consultant, Mandiant (English, Arabic)

Cloudingest Inc

Job Title: Mainframe RACF Security and zSecure SpecialistLocation: United States | Remote Work. Position Overview, Responsibilities and Required Skillset:<ul><li>We are seeking an experienced and strategic Senior Mainframe RACF Security and zSecure Specialist to join our mainframe security operations team. This senior-level role is responsible for architecting, implementing, and maintaining robust security controls across our z/OS environments, with a focus on RACF administration and zSecure optimization.</li><li>The ideal candidate will have deep expertise in IBM RACF (Resource Access Control Facility) and IBM zSecure, with a strong understanding of mainframe architecture, security policies, and compliance requirements. This position involves working closely with infrastructure teams, auditors, and application owners to manage access controls, perform security assessments, and maintain regulatory compliance.</li></ul>Key Responsibilities:<ul><li>Administer and maintain RACF security profiles, groups, and user IDs across multiple LPARs.</li><li>Utilize IBM zSecure suite for auditing, reporting, and automation of RACF administration tasks.</li><li>Analyze and implement security controls to meet internal policies and external regulatory requirements (e.g., SOX, HIPAA, PCI).</li><li>Perform regular security reviews, access recertifications, and vulnerability assessments.</li><li>Develop and maintain RACF and zSecure documentation, including procedures, standards, and training materials.</li><li>Collaborate with internal teams to support application onboarding and access provisioning.</li><li>Respond to security incidents and provide forensic analysis.</li><li>Participate in audits and provide evidence of compliance with security controls.</li><li>Mentor junior security analysts and provide technical leadership in RACF and zSecure best practices.</li><li>Drive automation and efficiency in RACF administration.</li></ul>Required Qualifications:<ul><li>Expert-level proficiency in RACF security administration and mainframe security operations.</li><li>Expert-level proficiency in IBM zSecure suite (Admin, Audit, Alert).</li><li>Strong command of z/OS, JCL, TSO/ISPF, and mainframe architecture.</li><li>Excellent communication skills with the ability to translate technical risks into business impact.</li><li>Demonstrated ability to work independently and influence across teams.</li></ul>Preferred Qualifications:<ul><li>Proficient in ACF2 Security administration</li><li>Experience integrating mainframe security with enterprise IAM, PAM, and SIEM platforms</li><li>Advanced scripting skills in REXX, CLIST, or other automation tools</li><li>Familiarity with Identity and Access Management (IAM) frameworks</li></ul>Pay: $40.00 - $48.00 per hourApplication Question(s):<ul><li>Experience with Mainframe RACF Security and zSecure?</li><li>Experience implementing and maintaining robust security controls across our z/OS environments, with a focus on RACF administration and zSecure optimization?</li><li>Hands-on experience and expertise in IBM RACF (Resource Access Control Facility) and IBM zSecure, with a strong understanding of mainframe architecture, security policies, and compliance requirements?</li><li>Experience working with infrastructure teams, auditors, and application owners to manage access controls, perform security assessments, and maintain regulatory compliance?</li><li>Experience in administering and maintaining RACF security profiles, groups, and user IDs across multiple LPARs?</li><li>Experience with the IBM zSecure suite for auditing, reporting, and automating RACF administration tasks?</li><li>Experience with RACF security administration and mainframe security operations?</li><li>Experience with IBM zSecure suite (Admin, Audit, Alert)?</li><li>Expertise and command of z/OS, JCL, TSO/ISPF, and mainframe architecture?</li></ul>Work Location: Remote

Mainframe RACF Security and zSecure Specialist

Search 10000+ Senior application security consultant jobs near you this May. New roles added regularly across leading industries. Apply today.