Description

You will design and implement Google SecOps SIEM solutions, managing data ingestion, normalization, and detection engineering. This role focuses on extending UDMs, creating custom parsers, and integrating security tools to reduce alert fatigue.

This role is remote.

Responsibilities

• Lead the design and implementation of Google SecOps data ingestion and log normalization from diverse sources.
• Extend pre-built UDMs and create custom parsers for required log sources.
• Integrate Google SecOps SIEM with SOAR, EDR, NDR, threat intelligence platforms, and ticketing systems.
• Create SIEM assets including detection rules using YARA-L, dashboards, and parsers.
• Develop SOAR playbooks for case handling and incident response aligned to triage needs.

Required Skills

• Strong experience in SIEM engineering and Google SecOps implementations.
• Expertise in Google Cloud security operations and log ingestion architectures.
• Hands-on experience with UDMs, custom parser creation, and data normalization.
• Knowledge of YARA-L for detection rule creation and threat detection engineering.
• Experience integrating SIEM platforms with SOAR, EDR, and NDR solutions.
• Ability to develop dashboards, alerts, detection rules, and monitoring assets.
• Experience writing custom scripts, integrations, and automation actions for SIEM platforms.
• 6+ years of professional experience in security operations or engineering.

Preferred Skills

• Experience working with cyber threat intelligence platforms and integrations.
• Knowledge of ticketing systems and operational incident workflows.

Key Skills

Education

Any Graduate