Security Infrastructure Engineer (Google SecOps)
Key Skills for This Role
Full Job Posting
Data ingestion and normalization
- Architect and maintain telemetry ingestion from multi-cloud and on-premises environments using Bind Plane Forwarders, C2C connectors, and webhooks.
- Design, build, and troubleshoot custom parsers to normalize non-standard logs into the Unified Data Model.
- Build dashboards for ingestion rates, latency, and data drops.
SOAR automation
- Develop incident response playbooks in Google SOAR using Python and visual builders.
- Build API integrations between Google SOAR and firewalls, EDR, IAM, ticketing, and other third-party tools.
- Automate artifact enrichment, evidence gathering, and initial containment tasks.
- Configure case management fields, stages, and SLA tracking to fit SOC needs.
Administration and SOC collaboration
- Monitor ingestion health and latency and manage role-based access controls.
- Integrate Mandiant, VirusTotal, and other threat intelligence feeds.
- Work with Tier 1 and Tier 2 analysts to tune YARA-L rules based on alert performance.
- Gather incident responder workflows and convert them into playbooks.
- Train users on UDM Search and the Google SecOps interface.
Infrastructure coordination
- Coordinate GCP, AWS, and Azure logging and Pub/Sub configuration for export to Google SecOps.
- Coordinate deployment and maintenance of Bind Plane Forwarders on servers and virtual machines.
- Work with network engineers to resolve connectivity issues and firewall blocks affecting telemetry.
Qualifications and experience
- Bachelor's degree in Computer Science, IT, Cybersecurity, or equivalent.
- SIEM certification, such as Google SecOps, Splunk, or Azure Sentinel.
- Security+, CySA+, CEH, CISSP, and GCIH certifications are preferred.
- 3–5 years of hands-on experience in security engineering, SOC automation, DevOps, security operations, or infrastructure security.
- Enterprise SIEM/SOAR platform experience and 1–2 years specifically focused on Google SecOps (Chronicle).
- Professional Python experience automating security workflows or building custom API connectors.
- Hands-on GCP security experience, including VPC service controls, IAM, and Cloud Logging.
Technical skills
- Languages and data: Python, BigQuery SQL, YARA/YARA-L, Bash, JSON, Protobuf, and Regex.
- Frameworks and tools: MITRE ATT&CK, NIST Cybersecurity Framework, Git, Terraform, Docker/Kubernetes.
- Strong analytical problem-solving, communication, independent prioritisation, deadline management, and attention to detail.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Whitefield Immigration
Data Architect
, QAT
The employer is seeking a senior Data Architect to define target data architecture and align it with enterprise standards and national data requirements. Candidates must have at least 10 years of relevant project experie
Data Analyst Power BI
, QAT
The employer is seeking an experienced Data Analyst specializing in Power BI to build and maintain dashboards, reporting solutions, and data pipelines that support business decisions. Candidates must have a relevant bach
Submit Your Resume To Talent Leaders
, QAT
Talent Leaders accepts resumes for consideration in its active talent pool across a range of industries. The team may contact candidates when suitable opportunities arise and their experience, goals, and values align.
Project Manager
, QAT
The employer is seeking a senior Project Manager to lead end-to-end delivery of a data strategy and governance programme, including client engagement, compliance, team coordination, and commercial performance. Candidates
Service Delivery Lead - Cloud and Systems (Managerial)
, QAT
The employer is seeking a Service Delivery Lead to run cloud and systems services, own service quality and SLA performance, and lead a technical team supporting enterprise clients. Candidates need at least nine years in
Business Analyst
, QAT
The employer is seeking a Business Analyst to connect business operations with a data programme by eliciting requirements, documenting processes and data flows, and supporting governance and quality changes. Candidates n
Service Design Architect - Information Security
, QAT
The employer seeks an experienced architect to design information security services for enterprise customers. The work spans customer requirements, service standards, capacity planning, monitoring, and collaboration with
Security Engineer (Tenable | Qualys | SIEM )
, QAT
The employer seeks a vulnerability management engineer to assess and reduce security risks across infrastructure, cloud, and hybrid environments. The work includes Tenable or Qualys scanning, SIEM monitoring, security co
Data Architect
, QAT
Data Analyst Power BI
, QAT
Submit Your Resume To Talent Leaders
, QAT
Project Manager
, QAT
Service Delivery Lead - Cloud and Systems (Managerial)
, QAT
Business Analyst
, QAT
Service Design Architect - Information Security
, QAT
Security Engineer (Tenable | Qualys | SIEM )
, QAT