SIEM Engineer - VOIS

VOIS; Bengaluru; On-site; INR 1,400,000 - 2,000,000; Full time

Job summary

VOIS seeks a SIEM Engineer specializing in Google SecOps to onboard and transform security telemetry for EU markets. You will build scalable ingestion patterns, validate data quality and ensure governance across telemetry pipelines.

You will collaborate with cyber, engineering and operations teams, maintain data lineage, and optimise ingestion tooling. Strong scripting skills and exposure to cloud security are essential.

Qualifications

• Hands-on experience with Google SecOps.
• Strong understanding of security log sources, including firewall, proxy, EDR, IAM, OS, cloud audit, application and network telemetry.
• Experience with log parsing, normalisation and schema mapping.
• Knowledge of syslog, agents, APIs, event hubs, collectors, forwarders and similar ingestion technologies.
• Scripting and automation experience using Python, PowerShell, Bash or similar.
• Experience troubleshooting data ingestion pipelines and validating end-to-end event delivery.
• Strong analytical and problem-solving skills with the ability to diagnose data quality and ingestion challenges.
• Excellent stakeholder engagement and collaboration skills, with experience working across engineering, security and operational teams.
• Understanding of governance requirements relating to telemetry ownership, lineage and compliance controls.

Responsibilities

• Onboard, transform, validate and deliver security telemetry into Google SecOps using scalable ingestion patterns.
• Configure, support, troubleshoot and optimise data ingestion pipelines and tooling to maintain reliable data flows.
• Implement and maintain data lineage, ownership tagging and metadata standards for onboarded data sources.
• Work with EU market cyber teams to gather onboarding requirements and ensure successful integration outcomes.
• Validate end-to-end event flow and data quality across ingestion pipelines.
• Support parser maintenance, schema mapping and normalisation activities for usable security telemetry.
• Identify and resolve issues related to delayed, missing or incorrect events.
• Contribute to operational improvements through automation, documentation and standard onboarding processes.
• Collaborate with security ops, engineering and platform teams to improve telemetry coverage.

Skills

Google SecOps

Security logs

Log parsing

Scripting

Data ingestion

Stakeholder mgmt

Tools

Syslog

APIs

Event hubs

Agents

Job description

Who We Are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation. As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability. We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal. #VOIS #BeUnrivalled #CreateTheFuture

About This Role

We are seeking a SIEM Engineer specialising in Google SecOps log onboarding and integration to support the EU Markets Cyber Security function. This role focuses on onboarding security telemetry identified by EU cyber teams into the Google SecOps platform, ensuring reliable, high-quality data is available for security monitoring, threat detection, investigations, compliance and operational reporting. The successful candidate will play a key role in maintaining data quality, governance standards and operational effectiveness across security telemetry pipelines while collaborating with cyber, engineering and operational stakeholders.

What You’ll Do

Onboard, transform, validate and deliver security telemetry, log and event sources into Google SecOps using scalable and reusable ingestion patterns.

Configure, support, troubleshoot and optimise data ingestion pipelines and associated tooling to maintain reliable and high-performing data flows.

Implement and maintain data lineage, ownership tagging and metadata standards for onboarded data sources to support governance, compliance and regulatory requirements.

Work closely with EU market cyber teams to gather onboarding requirements, understand source-system constraints and ensure successful integration outcomes.

Validate end-to-end event flow and data quality across ingestion pipelines.

Support parser maintenance, schema mapping and normalisation activities to ensure consistent and usable security telemetry.

Identify and resolve issues relating to delayed, missing, duplicated or incorrectly parsed security events.

Contribute to operational improvements through automation, documentation and standardised onboarding processes.

Collaborate with security operations, engineering and platform teams to improve telemetry coverage and platform effectiveness.

Who You Are

Hands-on experience with Google SecOps.

Strong understanding of security log sources, including firewall, proxy, EDR, IAM, operating system, cloud audit, application and network telemetry.

Experience with log parsing, normalisation and schema mapping.

Knowledge of syslog, agents, APIs, event hubs, collectors, forwarders and similar ingestion technologies.

Scripting and automation experience using Python, PowerShell, Bash or similar technologies.

Experience troubleshooting data ingestion pipelines and validating end-to-end event delivery.

Strong analytical and problem-solving skills with the ability to diagnose data quality and ingestion challenges.

Excellent stakeholder engagement and collaboration skills, with experience working across engineering, security and operational teams.

Understanding of governance requirements relating to telemetry ownership, lineage and compliance controls.

What's In It For You

• Opportunity to work on a strategic Google SecOps platform supporting multiple European markets.
• Exposure to a broad range of security technologies, telemetry sources and cyber security use cases.
• Collaboration with international cyber security, engineering and operational teams.
• Opportunity to contribute to regulatory compliance initiatives, including security telemetry coverage and governance requirements.
• A role that combines technical delivery, problem-solving, automation and continuous improvement.
• Exposure to enterprise-scale security operations and security data management practices.

What Skills You Will Learn

• Advanced Google SecOps engineering and platform integration capabilities.
• End-to-end security telemetry onboarding and lifecycle management.
• Security log parsing, normalisation and schema mapping techniques.
• Security data governance, lineage management and compliance-oriented telemetry controls.
• Automation and scripting approaches for large-scale security operations environments.
• Cross-functional stakeholder management within multinational cyber security organisations.
• Enterprise-scale troubleshooting and optimisation of security data pipelines.

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background.

Join Us

At Vodafone, we're working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this. We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together. With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.