Google Secops SIEM Engineer

We are seeking a highly skilled and experienced Google Secops SIEM Engineer/SME to join our team. The ideal candidate will be responsible for designing, deploying, and managing Google Secops SIEM solutions, providing expert guidance on SIEM architecture, and ensuring robust security monitoring capabilities for our organization or clients.

Key Responsibilities:

1. SIEM Implementation & Configuration:

• Lead the deployment and configuration of Google Secops SIEM solutions in diverse environments.
• Integrate Secops SIEM with existing IT infrastructure, including firewalls, endpoints, cloud platforms, and other security tools.

2. Security Use Case Development:

• Design and implement security use cases, detection rules, and playbooks tailored to organizational needs.
• Regularly optimize queries and rules to minimize false positives and maximize detection efficacy.

3. Data Integration & Parsing:

• Configure and manage log ingestion pipelines from various data sources into Secops.
• Develop custom parsers and normalize logs for consistent and efficient analysis.

5. Stakeholder Collaboration:

• Collaborate with IT, SOC, and other security teams to align SIEM capabilities with organizational goals.
• Act as the primary point of contact for Secops-related queries and escalations.

6. Training & Documentation:

• Conduct training sessions for SOC and IT teams to maximize the value of Google Secops SIEM.
• Document processes, configurations, and troubleshooting steps for reference.

7. Performance Optimization:

• Monitor Secops SIEMs performance and recommend enhancements to ensure scalability and reliability.
• Stay updated with Secops new features and incorporate them into the security program.

Key Skills & Qualifications:

Technical Expertise:

• Extensive hands-on experience with Google Secops SIEM (deployment, management, and optimization).
• Proficiency in log management, SIEM rule creation, and threat detection techniques.
• Strong knowledge of security frameworks such as MITRE ATT&CK, NIST, and ISO 27001 etc.

Security Operations Knowledge:

• Familiarity with SOC workflows, incident response, and threat intelligence.
• Experience with integrating Secops SIEM with other security tools (e.g., SOAR, EDR, Firewalls, etc.).

Programming & Scripting:

• Knowledge of YARA-L for custom rule creation.
• Familiarity with Python, JSON, or other scripting languages for automation.

General Skills:

• Strong problem-solving and analytical skills.
• Excellent verbal and written communication.
• Ability to manage multiple projects and priorities effectively.