SIEM Engineer - VOIS

Vodafone Group Plc; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Vodafone Group Plc's VOIS division is seeking a SIEM Engineer specializing in Google SecOps log onboarding to support the EU Markets Cyber Security function. You will onboard, transform and validate security telemetry into Google SecOps, ensuring high-quality data for monitoring, investigations, regulatory reporting and governance.

Work closely with EU market cyber teams, engineering and operations to maintain data quality, implement lineage, and optimise ingestion pipelines.

Qualifications

• Hands-on experience with Google SecOps and security telemetry onboarding.
• Strong knowledge of security log sources including firewall, proxy, EDR, IAM, OS, cloud audit.
• Experience with log parsing, normalisation and schema mapping.
• Ability to troubleshoot data ingestion pipelines and validate end-to-end event delivery.

Responsibilities

• Onboard, transform, validate and deliver security telemetry into Google SecOps using scalable ingestion patterns.
• Configure, support, troubleshoot and optimise data ingestion pipelines to maintain reliable data flows.
• Implement and maintain data lineage, ownership tagging and metadata standards for onboarded sources.
• Work with EU market cyber teams to gather onboarding requirements and ensure successful integration outcomes.
• Validate end-to-end event flow and data quality across pipelines.
• Contribute to automation, documentation and standardised onboarding processes.
• Collaborate with security operations, engineering and platform teams to improve telemetry coverage.

Skills

Google SecOps

Security telemetry

Log parsing

Data governance

Ingestion pipelines

Tools

Python

PowerShell

Bash

Job description

Who we are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation. As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability. We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.

About this Role

We are seeking a SIEM Engineer specialising in Google SecOps log onboarding and integration to support the EU Markets Cyber Security function. This role focuses on onboarding security telemetry identified by EU cyber teams into the Google SecOps platform, ensuring reliable, high-quality data is available for security monitoring, threat detection, investigations, compliance and operational reporting. The successful candidate will play a key role in maintaining data quality, governance standards and operational effectiveness across security telemetry pipelines while collaborating with cyber, engineering and operational stakeholders.

What you’ll do

• Onboard, transform, validate and deliver security telemetry, log and event sources into Google SecOps using scalable and reusable ingestion patterns.
• Configure, support, troubleshoot and optimise data ingestion pipelines and associated tooling to maintain reliable and high-performing data flows.
• Implement and maintain data lineage, ownership tagging and metadata standards for onboarded data sources to support governance, compliance and regulatory requirements.
• Work closely with EU market cyber teams to gather onboarding requirements, understand source-system constraints and ensure successful integration outcomes.
• Validate end-to-end event flow and data quality across ingestion pipelines.
• Support parser maintenance, schema mapping and normalisation activities to ensure consistent and usable security telemetry.
• Identify and resolve issues relating to delayed, missing, duplicated or incorrectly parsed security events.
• Contribute to operational improvements through automation, documentation and standardised onboarding processes.
• Collaborate with security operations, engineering and platform teams to improve telemetry coverage and platform effectiveness.

Who you are

• Hands-on experience with Google SecOps.
• Strong understanding of security log sources, including firewall, proxy, EDR, IAM, operating system, cloud audit, application and network telemetry.
• Experience with log parsing, normalisation and schema mapping.
• Knowledge of syslog, agents, APIs, event hubs, collectors, forwarders and similar ingestion technologies.
• Scripting and automation experience using Python, PowerShell, Bash or similar technologies.
• Experience troubleshooting data ingestion pipelines and validating end-to-end event delivery.
• Strong analytical and problem-solving skills with the ability to diagnose data quality and ingestion challenges.
• Excellent stakeholder engagement and collaboration skills, with experience working across engineering, security and operational teams.
• Understanding of governance requirements relating to telemetry ownership, lineage and compliance controls.

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

What's in it for you

• Opportunity to work on a strategic Google SecOps platform supporting multiple European markets.
• Exposure to a broad range of security technologies, telemetry sources and cyber security use cases.
• Collaboration with international cyber security, engineering and operational teams.
• Opportunity to contribute to regulatory compliance initiatives, including security telemetry coverage and governance requirements.
• A role that combines technical delivery, problem-solving, automation and continuous improvement.
• Exposure to enterprise-scale security operations and security data management practices.

What skills you will learn

• Advanced Google SecOps engineering and platform integration capabilities.
• End-to-end security telemetry onboarding and lifecycle management.
• Security log parsing, normalisation and schema mapping techniques.
• Security data governance, lineage management and compliance-oriented telemetry controls.
• Automation and scripting approaches for large-scale security operations environments.
• Cross-functional stakeholder management within multinational cyber security organisations.
• Enterprise-scale troubleshooting and optimisation of security data pipelines.

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background.

Join Us

At Vodafone, we're working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this. We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together. With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Alert

#JDEnhancedByTARA

Follow us on social media

LinkedIn: https://www.linkedin.com/company/vois/

Facebook: https://www.facebook.com/voisglobal

Instagram: https://www.instagram.com/voisglobal/