Description

Key Skills: SIEM, EDR, Google Cloud Platform, UDS, SOAR, ServiceNow, Cyber Threat Intelligence, Scripting

Roles and Responsibilities:

• Lead the design and implementation of Google SecOps data ingestion from diverse sources, including integration and normalization of logs.
• Extend pre-built UDMs and create custom parsers for required log sources.
• Integrate Google SecOps SIEM with SOAR, EDR, NDR, threat intelligence platforms, and ticketing systems.
• Write custom actions, scripts, and/or integrations to extend SIEM platform functionality.
• Monitor SIEM performance and take timely actions to scale in high-volume security environments.
• Create SIEM assets including detection rules using YARA-L, dashboards, and parsers.
• Migrate existing SIEM/SOAR assets and support SIEM/SOAR phase-out and phase-in approaches.
• Test and deploy newly created and migrated assets such as rules, playbooks, alerts, and dashboards.
• Design solutions to handle alert fatigue in SIEM correlation.
• Develop SOAR playbooks for case handling and incident response aligned to triage needs.
• Debug and resolve customer issues across ingestion, parsing, and normalization of data.

Skills Required:

• Strong experience in SIEM engineering and Google SecOps implementations.
• Expertise in Google Cloud security operations and log ingestion architectures.
• Hands-on experience with UDMs, custom parser creation, and data normalization.
• Knowledge of YARA-L for detection rule creation and threat detection engineering.
• Experience integrating SIEM platforms with SOAR, EDR, and NDR solutions.
• Ability to develop dashboards, alerts, detection rules, and monitoring assets.
• Experience building and migrating SIEM and SOAR assets across enterprise environments.
• Strong understanding of incident response workflows, security operations, and alert triage.
• Experience writing custom scripts, integrations, and automation actions for SIEM platforms.
• Ability to troubleshoot ingestion, parsing, normalization, and platform performance issues.
• Knowledge of security monitoring, alert fatigue reduction, and correlation strategies.
• Strong analytical, troubleshooting, stakeholder management, and communication skills.

Nice to Have

• Experience working with cyber threat intelligence platforms and integrations.
• Knowledge of ticketing systems and operational incident workflows.
• Experience with custom scripting and automation development for SecOps environments.

Education: Bachelor's Degree in Computer Science or related field

Key Skills

Education

Any Graduate