Senior Google Cloud Security Engineer – SecOps Lead

Beyond; Plymouth; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Pension scheme

Discretionary bonus

Death in service 4x

Private medical insurance

Dental & optical cashback

Cycle to work

Learning days

Work from anywhere (up to 3 weeks)

Job summary

Beyond is seeking a Senior Security Engineer to lead hands-on SecOps on Google Cloud. You will guide deployments, develop parsers and detections, and integrate security across multiple cloud environments for regulated workloads.

You’ll influence playbooks, training, and security posture while working with client teams in a hybrid model. Strong experience with Google SecOps, YARA-L, parsers and data ingestion is essential.

Qualifications

• Hands-on with Google SecOps including UDM, YARA-L, parsers and SOAR playbooks.
• Experience delivering SIEM/SOC on major platforms and cloud environments.
• Strong knowledge of Google Cloud security primitives (IAM, VPC, Cloud Logging).
• Scripting/automation skills (Python or Go) for parser and integration work.

Responsibilities

• Lead end-to-end SecOps deployments, including data ingestion, retention design and RBAC.
• Build and maintain parsers, UDM mappings and data models for cloud sources.
• Write and tune detection rules, and design SOAR playbooks with python integrations.
• Develop custom agents for deployment in customer environments using GCP.
• Configure CI/CD pipelines and secure cloud foundation blueprints for clients.
• Operationalise threat intelligence and run threat-hunting campaigns.

Skills

SIEM/SOC delivery

Google SecOps

YARA-L

Parsers

SOAR playbooks

Data ingestion

Python/Go

Terraform

Tools

Wiz

CrowdStrike

Splunk

Sentinel

Snyk

Job description

Beyond is seeking a Senior Security Engineer to lead hands-on SecOps on Google Cloud. You will guide deployments, develop parsers and detections, and integrate security across multiple cloud environments for regulated workloads.

You’ll influence playbooks, training, and security posture while working with client teams in a hybrid model. Strong experience with Google SecOps, YARA-L, parsers and data ingestion is essential.