SOC Architect - GoogleSecops

Lead administration, architecture, and optimization of Google SecOps (Chronicle SIEM & SOAR).

• Manage SIEM onboarding, parser development, UDM mapping, correlation rules, dashboards, and automation.
• Support migration, integration, and coexistence of SIEM platforms (ArcSight, QRadar, Splunk, Sentinel, LogRhythm, etc.) with Google SecOps.
• Design and implement detection use cases aligned with MITRE ATT&CK.
• Lead log source onboarding, normalization, troubleshooting, and data quality management.
• Develop and optimize YARA-L rules, SOAR playbooks, and threat detection content.
• Manage platform health, performance tuning, upgrades, and vendor coordination.
• Drive security monitoring, threat hunting, incident response, and root cause analysis activities.
• Manage RBAC, IAM integration, access governance, and compliance requirements.
• Provide technical leadership and mentoring to SOC analysts and engineers.
• Support audit, compliance, reporting, and continuous improvement initiatives. Skills
• Google SecOps (Chronicle SIEM & SOAR) • SIEM Architecture & Administration
• YARA-L /KQL Rule Development • UDM Mapping & Parsing using Regex • Detection Engineering/Usecase Management
• Threat Hunting & Incident Response • Windows and Linux Administration
• Azure, AWS, and GCP Security • MITRE ATT&CK Framework
• API Integrations & Automation SIEM Knowledge (Mandatory) Experience in one or more of Microsoft Sentinel, ArcSight, Splunk, IBM QRadar, LogRhythm. Preferred Certifications
• Google SecOps Certification (Mandatory) • Splunk/Sentinel Certified Admin.

  Role & responsibilities

Preferred candidate profile