Required Skills & Experience

Essential Experience

- Substantial experience in SIEM engineering, security operations engineering, security platform administration, telemetry engineering, or a closely related role.
- Demonstrated experience operating and supporting an enterprise-scale SIEM or security analytics platform.
- Demonstrated experience onboarding complex security telemetry from multiple technology domains.
- Hands-on experience diagnosing ingestion, transport, parsing, normalization, and data-quality issues.
- Experience working with security analysts and detection engineers to convert use-case requirements into data requirements.
- Experience delivering production changes through controlled engineering, testing, documentation, and operational handover processes.

Technical Knowledge

- Google Security Operations, including SIEM concepts, UDM, parsers, search, detections, enrichment, integrations, and SOAR-related data flows.
- Log and event transport patterns such as syslog, REST APIs, webhooks, cloud storage, message or event streaming, and agent-based collection.
- Data formats and schemas including JSON, XML, CSV,



key-value events, and vendor-specific log formats.
- Security telemetry from identity, endpoint, network, cloud, application, SaaS, and infrastructure platforms.
- Authentication and integration concepts including OAuth, API keys, service accounts, certificates, secrets, and role-based access control.
- Linux administration, networking fundamentals, TLS, DNS, proxies, firewall rules, and troubleshooting across distributed systems.
- Scripting and automation using Python, shell, APIs, source control, CI/CD, or equivalent engineering toolsets.

Preferred Platform Experience

- Google SecOps / Chronicle SIEM and SOAR.
- Cribl Stream and security telemetry routing patterns.
- Splunk platform administration, search, data models, and migration or coexistence patterns.
- Azure, AWS, GCP, Entra ID, CrowdStrike, Microsoft Defender, Cortex, and major network security technologies.
- CMDB, vulnerability management, threat intelligence, data lake, and federated-search integrations.

📌 Google SecOps (Navi Mumbai)
🏢 Principle Pride
📍 Navi Mumbai