Company : TCS

Skill : Google secops

Experience : 6 TO 12 years

Location : Chennai.

Date of interview : 5th Sep 2026.

Mode of interview : face to face

Job description:
Design, implement, and optimize Google Chronicle SIEM for scalable log ingestion, parsing, normalization, and enrichment.
Create and updating correlation rules and use cases
Develop and fine-tune detection rules, parsers, and correlation logic to improve threat detection accuracy.
Integrate diverse log sources including firewalls, endpoint security, cloud services, IAM, ,network devices and etc.,.
Build and maintain custom parsers and dashboards to enhance visibility into security events.
Collaborate with threat hunting and detection engineering teams to identify and implement current detection logic.
Design and implement automation workflows (SOAR-based or API-based) to reduce analyst workload and response time.
Automate alert triage, enrichment, and response actions using scripts, playbooks, or orchestration tools.




Integrate Google Chronicle with automation platforms (e.g., Cortex XSOAR, Splunk SOAR, Swimlane, or custom Python-based frameworks).
Deploy, configure, and manage Bind Plane agents across servers and cloud workloads.
Set up data ingestion from multiple sources (Windows, Linux, databases, firewalls, cloud services).
Normalize data schemas and forward logs to SIEM or observability tools (Chronicle, Elastic, Splunk).
Configure pipelines for log transformation, labeling, and enrichment.
Design, configure, and manage Cribl Stream pipelines for log, metric, and trace ingestion.
Build data routing rules to send telemetry to multiple destinations (SIEM, S3, Data Lake).
Implement data filtering, sampling, and transformation to optimize SIEM licensing.
Integrate enterprise log sources including servers, firewalls, cloud platforms, and APM tools
Manage Cribl workers, leaders, and edge deployments.

📌 Google Secops Chennai (India)
🏢 Tata Consultancy Services
📍 India