Deep expertise in Google SecOps, including the unified SIEM and SOAR platform (formerly Chronicle). Proficiency in writing YARA-L rules and a thorough understanding of the Unified Data Model (UDM) for log normalization. Hands-on experience with security automation, orchestration, and integrating third-party tools via APIs.
Preferred Qualifications: Google Cloud Skilled Security Engineer certification.