Senior Google Cloud Security Engineer — SIEM/SOAR & GCP

Beyond; Manchester; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Private medical Insurance

Flexible working hours

Work from anywhere

Learning and certifications

Job summary

Beyond is hiring a Senior Security Engineer to protect Google Cloud estates for regulated enterprise clients. You will lead hands-on SecOps work across GCP, SIEM/SOC deployments, and threat-focused projects, while building reusable content for the practice.

In this senior, client-delivery role you will also contribute to accelerators, parsers, rule packs, playbooks, and productized security playbooks, helping customers scale securely and efficiently.

Qualifications

• Strong SIEM/SOC delivery experience on any major platform (Google SecOps / Chronicle preferred).
• Hands-on with Google SecOps: UDM, YARA-L, parsers, SOAR playbooks, data ingestion patterns.
• Solid grounding in Google Cloud security primitives: IAM, Organization Policies, VPC Service Controls, Cloud Logging, Cloud KMS.
• Comfortable with Terraform, CI/CD pipelines and at least one scripting language (Python, Go) for automation.
• Experience supporting regulated workloads and translating compliance requirements into operational controls.

Responsibilities

• Lead end-to-end SecOps deployments — tenant setup, multi-tenant architecture, data ingestion, retention design, RBAC, and feed onboarding.
• Build parsers, UDM mappings, and data models for Google Cloud, AWS, Azure, endpoint, identity, and network sources
• Write, test, and tune YARA-L detection rules, including single-event, multi-event, and composite detections
• Design SOAR playbooks and python integrations
• Develop custom agents that can be deployed in customer environments using GCP infrastructure.

Skills

SIEM/SOC Delivery

Google SecOps

Google Cloud Security

Terraform

CI/CD pipelines

Python

Go

Regulated workloads

Risk articulation

Tools

Wiz

CrowdStrike

Splunk

Sentinel

Snyk

Job description

Beyond is hiring a Senior Security Engineer to protect Google Cloud estates for regulated enterprise clients. You will lead hands-on SecOps work across GCP, SIEM/SOC deployments, and threat-focused projects, while building reusable content for the practice.

In this senior, client-delivery role you will also contribute to accelerators, parsers, rule packs, playbooks, and productized security playbooks, helping customers scale securely and efficiently.