Lead administration, architecture, and optimization of Google SecOps (Chronicle SIEM & SOAR).
Manage SIEM onboarding, parser development, UDM mapping, correlation rules, dashboards, and automation.
Support migration, integration, and coexistence of SIEM platforms (ArcSight, QRadar, Splunk, Sentinel, LogRhythm, etc.) with Google SecOps.
Design and implement detection use cases aligned with MITRE ATT&CK.;
Lead log source onboarding, normalization, troubleshooting, and data quality management.
Develop and optimize YARA-L rules, SOAR playbooks, and threat detection content.
Manage platform health, performance tuning, upgrades, and vendor coordination.
Drive security monitoring, threat hunting, incident response, and root cause analysis activities.
Manage RBAC, IAM integration, access governance, and compliance requirements.
Provide technical leadership and mentoring to SOC analysts and engineers.




Support audit, compliance, reporting, and continuous improvement initiatives. Skills
Google SecOps (Chronicle SIEM & SOAR) • SIEM Architecture & Administration
YARA-L /KQL Rule Development • UDM Mapping & Parsing using Regex • Detection Engineering/Usecase Management
Threat Hunting & Incident Response • Windows and Linux Administration
Azure, AWS, and GCP Security • MITRE ATT&CK; Framework
API Integrations & Automation SIEM Knowledge (Mandatory) Experience in one or more of Microsoft Sentinel, ArcSight, Splunk, IBM QRadar, LogRhythm. Preferred Certifications
Google SecOps Certification (Mandatory) • Splunk/Sentinel Certified Admin.Role & responsibilities

Preferred candidate profile

📌 Soc Architect Googlesecops Bengaluru
🏢 Atos
📍 Bengaluru