Lead administration, architecture, and optimization of Google SecOps (Chronicle SIEM & SOAR).

- Manage SIEM onboarding, parser development, UDM mapping, correlation rules, dashboards, and automation.
- Support migration, integration, and coexistence of SIEM platforms (ArcSight, QRadar, Splunk, Sentinel, LogRhythm, etc.) with Google SecOps.
- Design and implement detection use cases aligned with MITRE ATT&CK.;
- Lead log source onboarding, normalization, troubleshooting, and data quality management.
- Develop and optimize YARA-L rules, SOAR playbooks, and threat detection content.
- Manage platform health, performance tuning, upgrades, and vendor coordination.
- Drive security monitoring, threat hunting, incident response, and root cause analysis activities.
- Manage RBAC, IAM integration, access governance, and compliance requirements.
- Provide technical leadership and mentoring to SOC analysts and engineers.




- Support audit, compliance, reporting, and continuous improvement initiatives. Skills
- Google SecOps (Chronicle SIEM & SOAR) • SIEM Architecture & Administration
- YARA-L /KQL Rule Development • UDM Mapping & Parsing using Regex • Detection Engineering/Usecase Management
- Threat Hunting & Incident Response • Windows and Linux Administration
- Azure, AWS, and GCP Security • MITRE ATT&CK; Framework
- API Integrations & Automation SIEM Knowledge (Mandatory) Experience in one or more of Microsoft Sentinel, ArcSight, Splunk, IBM QRadar, LogRhythm. Preferred Certifications
- Google SecOps Certification (Mandatory) • Splunk/Sentinel Certified Admin.Role & responsibilities

Preferred candidate profile

📌 SOC Architect - GoogleSecops (Bengaluru)
🏢 Atos
📍 Bengaluru