Job Description
Required Skills & Experience
nEssential Experience
n
- n
- Substantial experience in SIEM engineering, security operations engineering, security platform administration, telemetry engineering, or a closely related role.n
- Demonstrated experience operating and supporting an enterprise-scale SIEM or security analytics platform.n
- Demonstrated experience onboarding complex security telemetry from multiple technology domains.n
- Hands-on experience diagnosing ingestion, transport, parsing, normalization, and data-quality issues.n
- Experience working with security analysts and detection engineers to convert use-case requirements into data requirements.n
- Experience delivering production changes through controlled engineering, testing, documentation, and operational handover processes.n

nTechnical Knowledge
n
- n
- Google Security Operations, including SIEM concepts, UDM, parsers, search, detections, enrichment, integrations, and SOAR-related data flows.n
- Log and event transport patterns such as syslog, REST APIs, webhooks, cloud storage,



message or event streaming, and agent-based collection.n
- Data formats and schemas including JSON, XML, CSV, key-value events, and vendor-specific log formats.n
- Security telemetry from identity, endpoint, network, cloud, application, SaaS, and infrastructure platforms.n
- Authentication and integration concepts including OAuth, API keys, service accounts, certificates, secrets, and role-based access control.n
- Linux administration, networking fundamentals, TLS, DNS, proxies, firewall rules, and troubleshooting across distributed systems.n
- Scripting and automation using Python, shell, APIs, source control, CI/CD, or equivalent engineering toolsets.n

nPreferred Platform Experience
n
- n
- Google SecOps / Chronicle SIEM and SOAR.n
- Cribl Stream and security telemetry routing patterns.n
- Splunk platform administration, search, data models, and migration or coexistence patterns.n
- Azur

📌 Google SecOps (Vapi)
🏢 Principle Pride
📍 Vapi