Google Security Operations Engineer, SecOps Engineer
- Getiva Solutions LLC
3 Days Ago
NA
W2, C2C
San Antonio-TX
10-15 Years
Required Skills: Google SecOps
Job Description
Google Security Operations (SecOps) Engineer :
- The Google SecOps platform has been deployed but is early in its operational maturity. This role will provide hands-on administration, optimization, and subject matter expertise to help the client improve platform usability, data ingestion, detection fidelity, and overall SOC effectiveness.
- The ideal candidate is a self-directed security operations professional with a strong threat hunting mindset who can operate independently while collaborating across security, IT, and engineering teams.
Key Responsibilities :
Platform Administration & Ownership
Serve as the primary operator and SME for the Google SecOps platform
Monitor platform health, ingestion pipelines, and data flow
Maintain and optimize UDM mappings, parsers, and connectors
Troubleshoot ingestion and normalization issues
Support case management workflows and automation
Detection Engineering & Threat Hunting
Develop, tune, and maintain detection rules and analytics
Perform proactive threat hunting across enterprise telemetry
Reduce false positives and improve alert fidelity
Leverage threat intelligence for enrichment and correlation
Build dashboards and operational metrics
Data Onboarding & Pipeline Expansion
Onboard and normalize new log sources across IT (and OT where applicable)
Validate telemetry coverage and identify visibility gaps
Partner with infrastructure and application teams to expand logging
Improve enrichment and correlation quality
Optimize ingestion pipelines for performance and scale
SOC Enablement & Collaboration
Partner with SOC analysts to improve workflows and usability
Provide mentoring and knowledge transfer to junior staff
Document runbooks, standards, and operational procedures
Support incident investigations when required
Communicate technical findings to stakeholders
Continuous Improvement
Identify platform maturity gaps and improvement opportunities
Recommend and implement automation use cases
Establish operational best practices
Support roadmap development for SecOps growth
Measure and report on platform effectiveness
Experience
Security Operations, SIEM engineering, or detection engineering
Hands-on experience with Google SecOps / Chronicle
Experience working within SOC or Incident Response environments
Strong background onboarding and normalizing log sources
Experience tuning detections and reducing alert noise
Proven ability to work independently in client environments
Technical Skills
UDM and parser tuning
Detection rule development
Log ingestion pipelines
SOAR / automation workflows
Threat intelligence integration
Query development and data analysis
Cloud telemetry (GCP, AWS, or Azure)
Preferred Qualifications
OT / ICS security experience
Oil, gas, refinery, or energy sector experience
Familiarity with industrial protocols (Modbus, DNP3, OPC)
Experience bridging IT and OT telemetry
Threat hunting or purple team background
