Senior Cybersecurity Engineer, GCP SecOps, Remote

Globant; Nuevo León; Presencial; MXN 700.000 - 1.100.000; Jornada completa

Descripción de la vacante

Globant is seeking a Senior Cybersecurity Engineer with SecOps and GCP to help partners evolve and defend in the digital era. You will lead defensive security practices across the development lifecycle and help strengthen the defense infrastructure.

As part of a global team, you will design scalable log pipelines, implement SIEM/SOAR, and perform proactive threat hunting leveraging Google Threat Intelligence and APIs. English is required; this remote role can be filled from within Mexico.

Formación

• Conversational English is required.
• Experience working with GCP under a DevSecOps approach, integrating and automating defensive security practices throughout the development lifecycle.
• End-to-end management and implementation of the unified SIEM and SOAR platform (formerly Chronicle) to strengthen defense infrastructure.
• Design scalable log ingestion pipelines and create custom parsers to ensure high-quality telemetry for event detection.
• Apply deep knowledge of the Unified Data Model (UDM) for proper log structuring and normalization.
• Write, test, and fine-tune defensive detection rules using YARA-L to identify emerging threats.
• Build and automate complex incident response playbooks (SOAR) to contain threats and reduce MTTR.
• Execute proactive threat hunting and forensic investigations leveraging Google Threat Intelligence, and integrate third-party security tools via APIs.
• Preferred: Certifications such as Google Cloud Professional Security Engineer, Google Cloud Security Operations Engineer, or training in Google SIEM & SOAR.

Conocimientos

Conversational English

GCP DevSecOps

SIEM & SOAR

Log Ingestion Pipelines

UDM Knowledge

YARA-L Rules

Incident Response Playbooks

Threat Hunting

Threat Intelligence

GCP Certifications

Herramientas

Chronicle SIEM

Descripción del empleo

Globant is seeking a Senior Cybersecurity Engineer with SecOps and GCP to help partners evolve and defend in the digital era. You will lead defensive security practices across the development lifecycle and help strengthen the defense infrastructure.

As part of a global team, you will design scalable log pipelines, implement SIEM/SOAR, and perform proactive threat hunting leveraging Google Threat Intelligence and APIs. English is required; this remote role can be filled from within Mexico.