Cloud SecOps SIEM/SOAR Engineer (Google SecOps)

Softthink Solutions Inc; Washington (District of Columbia); On-site; USD 180,000 - 210,000; Full time

Job summary

Softthink Solutions Inc. is seeking a SIEM/SOAR Engineer (Cloud Sec Spec 3) in Washington, DC.

The role focuses on building and configuring a Google SecOps SIEM/SOAR environment, ensuring ingestion pipelines, detections, playbooks, and automation are optimized for SBA’s security operations. Responsibilities include configuring ingestion pipelines, implementing detections, developing SOAR playbooks, integrating threat intel sources, and tuning detections to reduce false positives.

Qualifications

• 10+ years of experience with SIEM/SOAR platforms (Google SecOps preferred).
• Experience building detection rules and automation workflows.
• Experience with cloud telemetry ingestion (Azure, AWS, on-prem).
• Experience with threat intelligence integration.

Responsibilities

• Configure ingestion pipelines and validate end-to-end log flow.
• Implement Google SecOps detections and build custom detection rules.
• Develop SOAR playbooks for incident categories.
• Integrate threat intelligence sources.
• Tune detections to false-positive thresholds.
• Assist with runbooks, analyst training, and transition.

Job description

Softthink Solutions Inc. is seeking a SIEM/SOAR Engineer (Cloud Sec Spec 3) in Washington, DC.

The role focuses on building and configuring a Google SecOps SIEM/SOAR environment, ensuring ingestion pipelines, detections, playbooks, and automation are optimized for SBA’s security operations. Responsibilities include configuring ingestion pipelines, implementing detections, developing SOAR playbooks, integrating threat intel sources, and tuning detections to reduce false positives.