Google Secops

Job description

As a Google SecOps Engineer, you will be responsible for the end-to-end implementation and management of the Google Security Operations platform, including both SIEM and SOAR capabilities. Your primary focus will be to enhance the organization's security posture by building robust threat detection mechanisms and streamlining incident response through advanced automation.

Responsibilities:

• Design and implement scalable log ingestion pipelines and develop custom parsers for diverse data sources to ensure high-quality telemetry.
• Develop, test, and tune sophisticated detection rules using YARA-L to identify emerging threats.
• Build and automate complex incident response playbooks within the SOAR component to reduce mean time to respond (MTTR).
• Perform proactive threat hunting and forensic investigations leveraging Google Threat Intelligence.

Minimum Qualifications:

• Deep expertise in Google SecOps, including the unified SIEM and SOAR platform (formerly Chronicle).
• Proficiency in writing YARA-L rules and a thorough understanding of the Unified Data Model (UDM) for log normalization.
• Hands-on experience with security automation, orchestration, and integrating third-party tools via APIs.

Preferred Qualifications:

• Google Cloud Professional Security Engineer certification