Job Role: Senior Google SecOps / SIEM-SOAR Engineer
Location: Remote (US-based), with travel to Dallas once a month
Hire-Type: W2 Contract
Experience: 7–10+ years, with strong recent AI experience
Description
We are looking for a highly experienced, hands-on Security Operations Engineer with strong expertise in SIEM/SOAR platforms, detection engineering, security automation, and enterprise security operations.
The ideal candidate should have experience implementing, migrating, and optimizing security operations platforms, preferably Google SecOps (Chronicle), and be comfortable working directly with clients on complex security engineering engagements.
Key Responsibilities & Requirements
- Strong hands-on experience with enterprise SIEM/SOAR platforms, preferably Google SecOps (Chronicle), Splunk, Microsoft Sentinel, or Palo Alto Cortex XSIAM.
- Experience implementing, configuring, integrating, and optimizing SIEM/SOAR solutions in enterprise environments.
- Experience with SIEM platform migrations, particularly Splunk or other existing SIEM platforms to Google SecOps (Chronicle).
- Strong expertise in detection engineering, including developing, tuning, and optimizing security detection rules, alerts, and correlation logic.
- Experience with security log ingestion, parsing, normalization, data pipelines, and integration of multiple security data sources.
- Hands-on experience with security orchestration and automation, including SOAR playbooks, incident response workflows, and API-based integrations.
- Strong understanding of security operations, threat detection, incident response, and integration with cloud and endpoint security technologies.
- Ability to independently troubleshoot complex security platform issues, perform assessments, recommend best practices, and optimize existing implementations.
- Excellent communication and client-facing skills, with the ability to explain technical solutions, prepare documentation, and collaborate with security teams.
Nice to Have
- Hands-on experience with Google SecOps / Chronicle, including YARA-L detection rules and SOAR automation.
- Experience with Wiz, Google Cloud security services, or other cloud security platforms.
- Python scripting and automation experience.
- Exposure to AI-driven security operations, agentic SOC, and AI-assisted threat detection.
Rate:
Not specified
Location:
Remote
IR35 Status:
Not specified
Remote Status:
Remote
Industry:
Cybersecurity
Seniority Level:
Senior