Remote Detection & SOAR Engineer

Google LLC; Australian Capital Territory; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Google Cloud, through Mandiant Consulting, seeks a Detection and SOAR Engineer to maintain SIEM/SOAR platforms, develop detections, and support a Cyber Defense Center for client engagements. You will work with Mandiant Architects, Analysts, and IT resources to enable daily tasks and incident detection capabilities in a global, security-focused environment.

The role emphasizes tuning detection content, writing queries in Python or PowerShell, and integrating APIs into automation playbooks.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field.
• 3 years of experience in detection engineering, SOAR automation, or related role.
• 3 years of experience with SOC/CSIRT or incident response teams.
• Experience with detection tuning and content creation using SIEM/EDR/NDR tools.
• Scripting SIEM solutions (Python or PowerShell) for queries, alerts, dashboards.

Responsibilities

• Identify challenges in customer CDC and plan improvements.
• Advise on technologies used by client CDC, CSIRT, and SOC.
• Create/modify SIEM use cases and SOAR playbooks in Python or related languages.
• Engage client stakeholders to drive security issue resolution.
• Provide expertise for SIEM, SOAR and other SOC technologies; support incident response.

Skills

Detection engineering

SOAR automation

Incident response teamwork

Education

Bachelor's degree in CS or related field

Tools

SIEM

EDR

NDR

Job description

Google Cloud, through Mandiant Consulting, seeks a Detection and SOAR Engineer to maintain SIEM/SOAR platforms, develop detections, and support a Cyber Defense Center for client engagements. You will work with Mandiant Architects, Analysts, and IT resources to enable daily tasks and incident detection capabilities in a global, security-focused environment.

The role emphasizes tuning detection content, writing queries in Python or PowerShell, and integrating APIs into automation playbooks.