Google secops

Company: TCS

Skill: Google secops

Experience: 6 TO 12 years

Location: Kochi

Date of interview: 12th Sep 2026

Mode of interview: face to face

Job description:

• Design, implement, and optimize Google Chronicle SIEM for scalable log ingestion, parsing, normalization, and enrichment.
• Create and updating correlation rules and use cases
• Develop and fine-tune detection rules, parsers, and correlation logic to improve threat detection accuracy.
• Integrate diverse log sources including firewalls, endpoint security, cloud services, IAM, ,network devices and etc.,.
• Build and maintain custom parsers and dashboards to enhance visibility into security events.
• Collaborate with threat hunting and detection engineering teams to identify and implement new detection logic.
• Design and implement automation workflows (SOAR-based or API-based) to reduce analyst workload and response time.
• Automate alert triage, enrichment, and response actions using scripts, playbooks, or orchestration tools.
• Integrate Google Chronicle with automation platforms (e.g., Cortex XSOAR, Splunk SOAR, Swimlane, or custom Python-based frameworks).
• Deploy, configure, and manage Bind Plane agents across servers and cloud workloads.
• Set up data ingestion from multiple sources (Windows, Linux, databases, firewalls, cloud services).
• Normalize data schemas and forward logs to SIEM or observability tools (Chronicle, Elastic, Splunk).
• Configure pipelines for log transformation, labeling, and enrichment.
• Design, configure, and manage Cribl Stream pipelines for log, metric, and trace ingestion.
• Build data routing rules to send telemetry to multiple destinations (SIEM, S3, Data Lake).
• Implement data filtering, sampling, and transformation to optimize SIEM licensing.
• Integrate enterprise log sources including servers, firewalls, cloud platforms, and APM tools
• Manage Cribl workers, leaders, and edge deployments.