- Design, build, administer, and optimize the Google SecOps platform for enterprise-scale environments
- Own platform reliability, scalability, availability, and operational health
- Manage platform configuration, upgrades, lifecycle management, and new feature adoption
- Develop standards and best practices for Google SecOps administration
- Design and implement scalable ingestion pipelines for security telemetry across cloud, SaaS, network, endpoint, and infrastructure platforms
- Onboard new data sources into Google SecOps while ensuring data quality, completeness, and consistency
- Develop and maintain parsers, mappings, and UDM normalization
- Validate log integrity, field mappings, timestamps, enrichment, and normalization
- Troubleshoot ingestion failures, parser issues, latency, and pipeline bottlenecks
- Implement event filtering and routing strategies to improve platform efficiency and optimize licensing costs
- Design scalable telemetry architectures supporting enterprise growth
- Build reusable onboarding frameworks, standards, and automation
- Drive infrastructure-as-code and configuration management initiatives where applicable
- Support platform resiliency, disaster recovery, and operational readiness
- Automate platform administration and operational tasks using Python, PowerShell, REST APIs, and other scripting languages
- Develop CI/CD processes for platform configuration, parser deployment, and operational content management
- Create automated validation processes for new data onboardings
- Build self-service onboarding workflows for internal engineering teams where appropriate
- Develop operational dashboards measuring platform health, ingestion performance, parser quality, pipeline throughput, and platform utilization
- Monitor platform capacity, storage utilization, ingestion rates, and overall system health
- Perform performance tuning and capacity planning
- Establish operational metrics and service health reporting
- Build documentation, engineering standards, and onboarding guides
- Support SOC analysts with reliable security data and platform capabilities
- Recommend architectural improvements that increase visibility, scalability, and operational efficiency
Requirements
- Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience
- 5+ years of experience administering and engineering enterprise SIEM or security telemetry platforms
- Experience designing and operating large-scale security logging platforms
- Experience integrating enterprise applications using APIs and cloud-native services
- Strong troubleshooting and platform engineering skills across distributed systems
- Strong platform engineering mindset
- Deep understanding of enterprise log management and security telemetry architecture
- Experience improving platform reliability through automation and engineering best practices
- Ability to translate complex technical requirements into scalable operational solutions
- Strong communication skills for collaboration across engineering, cloud, networking, infrastructure, and security teams
- Experience with detection engineering, YARA-L rule development, SOAR platforms, MITRE ATT&CK, threat hunting, incident response, purple team collaboration, threat intelligence, or security automation is a plus but not required
Core Competencies
Demonstrates expertise in designing and optimizing Google SecOps platforms, ensuring reliability, scalability, and operational health. Proficient in automating platform administration and developing standards for security telemetry across various environments.
Highest-signal resume keywords
- Google SecOps Administration
- Platform Engineering
- Security Telemetry Architecture
- Automation Using Python
- CI/CD Processes
ATS Optimization Keywords
Hard Skills
- Enterprise SIEM Administration
- Security Logging Platforms
- API Integration
- Distributed Systems Troubleshooting
- Log Management
- Operational Metrics Development
- Data Quality Assurance
- Event Filtering Strategies
- Performance Tuning
- Capacity Planning
Soft Skills
- Strong Communication Skills
- Collaboration Across Teams
Certifications & Qualifications
- Bachelor's Degree in Computer Science
- Information Security
- Engineering
Industry Keywords
- Security Telemetry
- Incident Response
- Threat Hunting
- MITRE ATT&CK
- YARA-L Rule Development
Tools & Technologies
- Python
- PowerShell
- REST APIs
- Cloud-Native Services
- SOAR Platforms