Remote Detection & SOAR Engineer (Australia)

Google; Sydney; Hybrid; AUD 120,000 - 170,000; Full time

Job summary

Google is hiring for a Cyber Defense Center role within Google Cloud, focusing on maintaining SIEM/SOAR readiness and content creation. You will collaborate across cross-functional teams including Mandiant, IT resources, and client stakeholders to enhance security operations.

The role requires experience with detection content, SOAR playbooks, and incident response, along with the ability to integrate APIs and support daily CDC operations..remote work options within Australia are available.

Qualifications

• Bachelor's degree or equivalent in a technical field and practical experience.
• 3 years of detection engineering/SOAR automation experience.
• 3 years in SOC/CSIRT or incident response teams.
• Experience tuning detections and leveraging SIEM/EDR/NDR tools.
• Experience scripting SIEM queries/dashboards in Python or PowerShell.

Responsibilities

• Identify CDC challenges and plan/oversee improvement initiatives.
• Advise on technologies used by CDC, CSIRT, and SOC.
• Create/modify SIEM use cases and SOAR playbooks.
• Collaborate with client stakeholders to resolve security issues.
• Provide expertise for SIEM/SOAR and surge support for analysts.

Skills

Detection engineering

SOAR automation

SOC/CSIRT

Python/Powershell

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

SIEM

EDR

NDR

Job description

Google is hiring for a Cyber Defense Center role within Google Cloud, focusing on maintaining SIEM/SOAR readiness and content creation. You will collaborate across cross-functional teams including Mandiant, IT resources, and client stakeholders to enhance security operations.

The role requires experience with detection content, SOAR playbooks, and incident response, along with the ability to integrate APIs and support daily CDC operations..remote work options within Australia are available.