Google Cuts Cloud and Cybersecurity Teams to Fund AI Push

Google's cloud division took quiet but significant cuts

Google laid off employees across its Cloud division in the first week of June 2026, with cuts rolling out over roughly two weeks. The company has not confirmed a headcount number, but affected staff began posting about their departures on LinkedIn almost immediately. In at least one internal communication, Google cited the need to reinvest in AI growth areas as the reason for the move.

The Google Threat Intelligence Group, one of the company's most prominent security units, was hit on June 4. Andrew Kopcienski, a principal intelligence analyst at the group, confirmed his layoff on LinkedIn, writing that he and a lot of other great folks at the Threat Intelligence Group had been cut. The unit is known for tracking nation-state hackers, publishing research on global cyber campaigns, and monitoring active malware operations. Its research is widely read across the security industry, not just within Google.

A Google spokesperson told Business Insider: 'We regularly evaluate our internal structures to ensure we are best positioned to meet the evolving demands of our customers and the industry.' The statement is standard issue, but the targets are not. These were not low-visibility back-office roles.

Mandiant gets hit three years after a $5.4 billion bet

The cuts extended beyond the Threat Intelligence Group to employees at Mandiant - the cybersecurity firm Google acquired in September 2022 for $5.4 billion. Other teams across Google Cloud were also affected, though the full scope has not been confirmed.

When Google bought Mandiant, the strategic pitch was clear: bolt world-class incident response and threat intelligence capabilities onto its cloud platform and compete directly with Microsoft's security-first enterprise cloud story. Three years later, some of that same workforce is being reduced to create capacity for AI infrastructure spending.

Layoff trackers and California WARN filings suggest Google has displaced an estimated 1,500 to 3,000 or more engineers in 2026 through rolling cuts, restructuring, and manager delayering. Alphabet's total workforce stood at approximately 194,668 as of Q1 2026, meaning the 2026 reductions represent roughly 1 to 2 percent of headcount - notable even if there is no single headline number attached.

The spending math explains the trade-off

Google's Q1 2026 financials make the calculus visible. Alphabet reported $109.9 billion in total revenue for the quarter, up 22% year over year. Google Cloud grew 63% to $20 billion. Net income hit $62.57 billion, up 81%. By any measure, the business is performing. The layoffs are not a distress signal - they are a reallocation signal.

Capital expenditure in Q1 alone reached $35.7 billion, more than double the $17.2 billion spent in Q1 2025. Alphabet raised its full-year 2026 capex guidance to $180 to $190 billion, up from the prior range of $175 to $185 billion. For context, that figure is larger than the annual GDP of most European countries.

At Google Cloud Next 2026, Sundar Pichai announced that more than half of Google's overall machine learning compute investment for 2026 is going to Cloud. The message from leadership is straightforward: AI infrastructure is the priority, and headcount that does not directly serve that priority is being reduced or shifted.

Google is not alone - this is the 2026 Big Tech playbook

Tech layoffs in 2026 have consistently followed the same script: strong revenue, record AI spending, workforce reduction framed as reinvestment. Meta cut roughly 10% of its global workforce earlier in the year. Coinbase and payments firm Block both cited AI transformation when announcing significant headcount reductions. Cloudflare, Oracle, and Amazon also made cuts in the first half of 2026.

Combined capex across five hyperscalers - Microsoft, Alphabet, Meta, Amazon, and Apple - is now on track to exceed $650 billion in 2026. That capital has to go somewhere, and for large technology companies it is increasingly going to compute infrastructure rather than human headcount in research, security, or design functions.

The cybersecurity sector has been hit particularly hard. For US enterprise security teams, the Google Threat Intelligence Group cuts are directly relevant. The group published regular research on nation-state attacks, zero-days, and active threat campaigns that informed defensive postures industry-wide. Mandiant's incident response capacity may also be affected as the organization continues to absorb workforce changes.

What US cloud and security teams should track

• Monitor Google Threat Intelligence Group's publication cadence. If research output slows, that is a signal the cuts were deeper than publicly acknowledged.
• Mandiant enterprise customers should check their service agreements and ask account teams directly about incident response capacity following these reductions.
• Google Cloud's 63% revenue growth means it is winning enterprise contracts aggressively. The restructuring is strategic, not defensive - expect continued AI-native product launches alongside ongoing headcount adjustments.
• The broader tech layoffs 2026 pattern shows no sign of slowing. Companies with strong revenue and large AI capex commitments are the most likely to continue restructuring traditional roles through the rest of the year.

Sources