Google SecOps Platform Engineer
Core
Engineer Google SecOps (Chronicle) platforms for client engagements, handling data onboarding, parser development, detection engineering, and migration from legacy SIEMs.
Role type
Senior IC SecOps Platform Engineer
Builds
Google SecOps (Chronicle) ingestion pipelines, custom parsers, detection rules, and migration artifacts for hybrid cloud environments.
Domain
Cybersecurity / SIEM Engineering / Cloud Security
Required skills
Google SecOps (Chronicle) engineering, YARA-L detection rules, MITRE ATT&CK mapping, SIEM migration, Python scripting, GCP/Azure cloud logging, Git-based CI/CD, data ingestion pipelines, UDM mapping, non-standard log source onboarding
Preferred skills
BindPlane observability, detection-as-code, cloud-native exporters, SOC operations support, Google Cloud security architecture
Technologies
Google SecOps (Chronicle), YARA-L, Python, GCP, Azure, BindPlane, Git, Splunk
Responsibilities
Onboard new log sources end-to-end including ingestion, parser development, and UDM mapping; Develop and maintain custom parsers for non-standard data sources; Design, build, and tune detection rules using YARA-L mapped to MITRE ATT&CK; Lead migration from Splunk or other SIEMs to Google SecOps; Manage platform configurations and detection content through Git-based CI/CD workflows; Provide technical input to client stakeholders and produce engineering documentation.
Seniority
Senior, hands-on IC