SecOps Engineer

Greytip Software Private Limited; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Greytip Software Private Limited seeks a hands-on Google SecOps SIEM & SOAR Engineer to support and optimize our Google Security Operations platform. You will own end-to-end log onboarding, parser development, detections and automation while troubleshooting complex issues and performing root cause analysis.

You will design and implement SOAR playbooks, integrations, and APIs, and collaborate with SOC teams on investigations, incident response, and continuous improvement of data quality and

Qualifications

• 5+ years of experience in SIEM, SOC Engineering, Security Engineering, or Cybersecurity Operations.
• Strong hands-on experience with Google SecOps / Google Chronicle.
• Proven expertise in troubleshooting log ingestion, parsing, detections, and SOAR workflows.
• Experience developing parsers, detection rules, and security automation.
• Strong understanding of security technologies such as EDR, IAM, firewalls, WAF, cloud security, and threat intelligence.
• Good knowledge of APIs, JSON, Syslog, Windows/Linux logs, networking, and authentication protocols.
• Basic scripting skills in Python, PowerShell, or similar languages.
• Ability to analyze raw logs and troubleshoot issues across the complete security data pipeline.
• Strong problem-solving, analytical thinking, and root cause analysis skills.
• Relevant Google Cloud, Google SecOps, or cybersecurity certifications are highly desirable.

Responsibilities

• Manage, configure, troubleshoot, and optimize Google SecOps (Chronicle SIEM & SOAR).
• Investigate and resolve complex issues across log ingestion, parsing, UDM mapping, detections, alerts, and automation workflows.
• Perform end-to-end root cause analysis and implement sustainable fixes.
• Onboard and validate security telemetry from cloud, network, endpoint, identity, and application sources.
• Develop and maintain custom parsers and ensure accurate UDM normalization.
• Create, tune, and optimize YARA-L detections and threat hunting content.
• Design, develop, and support SOAR playbooks, integrations, APIs, and automation workflows.
• Support SOC teams with advanced investigations, incident response, and technical escalations.
• Monitor platform performance, data quality, detection effectiveness, and automation success rates.
• Maintain technical documentation, RCA reports, and engineering best practices.

Skills

Google SecOps

SIEM engineering

SOAR

Log onboarding

Detection engineering

Parsers development

Threat hunting content

YARA-L detections

APIs/JSON

Python scripting

Education

Bachelor's in CS/Security

Tools

Chronicle SIEM

Chronicle SOAR

YARA-L

UDM mapping

Parsers development

Job description

We are seeking a hands-on Google SecOps SIEM & SOAR Engineer to support and optimize our Google Security Operations platform. The role focuses on SIEM/SOAR engineering, troubleshooting, detection engineering, log onboarding, parser development, integrations, and automation. The ideal candidate can independently investigate complex technical issues, perform root cause analysis, and implement long-term solutions. This is an engineering-focused position within a dynamic security operations environment.

About the Role & Responsibilities

• Manage, configure, troubleshoot, and optimize Google SecOps (Chronicle SIEM & SOAR).
• Investigate and resolve complex issues across log ingestion, parsing, UDM mapping, detections, alerts, and automation workflows.
• Perform end-to-end root cause analysis and implement sustainable fixes.
• Onboard and validate security telemetry from cloud, network, endpoint, identity, and application sources.
• Develop and maintain custom parsers and ensure accurate UDM normalization.
• Create, tune, and optimize YARA-L detections and threat hunting content.
• Design, develop, and support SOAR playbooks, integrations, APIs, and automation workflows.
• Support SOC teams with advanced investigations, incident response, and technical escalations.
• Monitor platform performance, data quality, detection effectiveness, and automation success rates.
• Maintain technical documentation, RCA reports, and engineering best practices.

About You

• 5+ years of experience in SIEM, SOC Engineering, Security Engineering, or Cybersecurity Operations.
• Strong hands-on experience with Google SecOps / Google Chronicle.
• Proven expertise in troubleshooting log ingestion, parsing, detections, and SOAR workflows.
• Experience developing parsers, detection rules, and security automation.
• Strong understanding of security technologies such as EDR, IAM, firewalls, WAF, cloud security, and threat intelligence.
• Good knowledge of APIs, JSON, Syslog, Windows/Linux logs, networking, and authentication protocols.
• Basic scripting skills in Python, PowerShell, or similar languages.
• Ability to analyze raw logs and troubleshoot issues across the complete security data pipeline.
• Strong problem-solving, analytical thinking, and root cause analysis skills.
• Relevant Google Cloud, Google SecOps, or cybersecurity certifications are highly desirable.