Description

Responsibilities
Administer, maintain, and optimize the Google Chronicle SIEM platform
Onboard and manage log sources from cloud, on‑prem, network, and application environments
Develop and fine‑tune Detection Rules (YARA‑L / UDM rules)
Conduct threat hunting activities and analyze large datasets using Google Chronicle search capabilities
Build custom parsers, dashboards, and investigative workbooks
Monitor SIEM platform performance, ingest pipelines, and data quality
Collaborate with SOC teams on incident detection, triage, and escalation
Integrate Chronicle with other GCP security services (SecOps, SCC, Event Threat Detection)
Implement automated workflows and playbooks (SOAR integrations if applicable)
Troubleshoot ingestion failures, parsing gaps, and connector issues
Prepare documentation for SIEM architecture, rule logic, and operational processes
Ensure alignment with security policies, regulatory compliance, and audit expectations

Qualifications
5+ years of experience in SOC engineering or SIEM administration
Hands‑on experience with Google Chronicle SecOps
Robust understanding of SIEM concepts, log management,



and security analytics
Experience with UDM (Unified Data Model) and YARA‑L rule creation
Proficiency in log ingestion pipelines, data normalization, and enrichment
Positive understanding of cybersecurity domains:
Incident response
Threat detection
Network & endpoint security
Cloud security (GCP preferred)
Strong analytical skills and experience with large‑scale data investigations
Ability to work with APIs for automation and integration

Equal employment chance information

KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.

📌 Senior Cyber Transformation Gurugram
🏢 BSR u0026
📍 Gurugram