Description

Lead the design, implementation, and management of Google SecOps, Chronicle, and Threat Intelligence platforms.

This role is on-site.

Responsibilities

• Architect and maintain log ingestion pipelines, ensuring normalization and parsing from diverse sources.
• Build UDMs, custom parsers, and advanced correlation rules to optimize threat detection and reduce false positives.
• Develop and manage Bindplane agents and log forwarders for end-to-end component management.
• Create and optimize SOAR playbooks, dashboards, and reporting to automate incident response workflows.
• Collaborate with engineering teams to fine-tune detection logic, alert fidelity, and system architecture documentation.

Required Skills

• 5+ years as an SME in Google SecOps engineering, specifically with Google Chronicle and Google Threat Intelligence.
• Deep expertise in all Google SecOps modules, case management, and SIEM platform architecture.
• Proficiency in Bindplane agents, management components, and custom log forwarders.
• Strong Python scripting experience for automation, workflow optimization, and integration.
• Hands-on experience building UDMs, custom parsers, and detection rules.
• Proven ability to design correlation rules that handle alert fatigue and improve incident response efficiency.

Preferred Skills

• Experience with log forwarders, playbooks development, and workflow automation.
• Background in system architecture documentation and roadmap planning for SIEM platforms.

Key Skills

Education

Any Graduate