Company : TCS

Skill : Google secops

Experience : 6 TO 12 years

Location : Chennai.

Date of interview : 5th Sep 2026.

Mode of interview : face to face

:

- Design, implement, and optimize Google Chronicle SIEM for scalable log ingestion, parsing, normalization, and enrichment.
- Create and updating correlation rules and use cases
- Develop and fine-tune detection rules, parsers, and correlation logic to improve threat detection accuracy.
- Integrate diverse log sources including firewalls, endpoint security, cloud services, IAM, ,network devices and etc.,.
- Build and maintain custom parsers and dashboards to enhance visibility into security events.
- Collaborate with threat hunting and detection engineering teams to identify and implement current detection logic.
- Design and implement automation workflows (SOAR-based or API-based) to reduce analyst workload and response time.
- Automate alert triage, enrichment, and response actions using scripts, playbooks, or orchestration tools.
- Integrate Google Chronicle with automation platforms (e.g.,



Cortex XSOAR, Splunk SOAR, Swimlane, or custom Python-based frameworks).
- Deploy, configure, and manage Bind Plane agents across servers and cloud workloads.
- Set up data ingestion from multiple sources (Windows, Linux, databases, firewalls, cloud services).
- Normalize data schemas and forward logs to SIEM or observability tools (Chronicle, Elastic, Splunk).
- Configure pipelines for log transformation, labeling, and enrichment.
- Design, configure, and manage Cribl Stream pipelines for log, metric, and trace ingestion.
- Build data routing rules to send telemetry to multiple destinations (SIEM, S3, Data Lake).
- Implement data filtering, sampling, and transformation to optimize SIEM licensing.
- Integrate enterprise log sources including servers, firewalls, cloud platforms, and APM tools
- Manage Cribl workers, leaders, and edge deployments.

📌 Google secops (Chennai)
🏢 Tata Consultancy Services
📍 Chennai