Cloud Security Engineer

Foresite MSP; Olathe (KS); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Dental coverage

STD

Paid vacation

Sick leave

Company holidays

Training & mentorship

Impactful work

Job summary

Foresite MSP is seeking a SecOps Onboarding Specialist to drive hands-on configuration of Google SecOps (Chronicle) and cloud security tooling. You will build parser mappings, write YARA-L rules, and develop SOAR playbooks to streamline customer remediation workflows.

You’ll lead customer enablement sessions, translate complex configurations into actionable security insights, and troubleshoot integration issues to ensure successful handoffs from kickoff to final onboarding.

Qualifications

• At least 2 years hands-on SecOps experience with Google SecOps (Chronicle).
• Experience configuring GCP SCC and Wiz.
• Proficient in Python for security automation.
• Ability to onboard customers independently from kickoff to handoff.
• Ability to translate configurations into actionable security insights.

Responsibilities

• Lead hands-on configuration of GCP SCC and Wiz for new customers.
• Ensure data integrity in parser creation and UDM mapping.
• Write custom YARA-L detection rules to correlate cloud posture findings with network traffic.
• Develop end-to-end SOAR Playbooks and Python logic for custom actions.
• Lead sessions for customer analysts to navigate SCC/Wiz findings and investigate alerts.
• Troubleshoot integration errors and optimize automation scripts.

Skills

SecOps Expert

Chronicle

Parser creation

UDM mapping

YARA-L rule writing

GCP SCC

Wiz

Automation

Python

Independent onboarding

Strategic communicator

Education

Google Cloud Associate Cloud Engineer

Security certifications

Tools

GCP SCC

Wiz

Chronicle

Job description

What You'll Do

In this role, you will operate at the heart of Foresite’s technical onboarding framework. You will lead the hands-on configuration of cloud security tools, partnering closely with customer analysts to translate complex findings into automated, high-fidelity security operations. You will be measured on your ability to drive successful technical handoffs and your proficiency in building custom detection and remediation logic.

Technical Onboarding & Implementation

• Lead the Integration: Lead the hands-on configuration of GCP SCC and Wiz for new customers, ensuring all high-fidelity security findings are correctly ingested into Google SecOps.

• Data Integrity: Ensure technical accuracy in parser creation and UDM mapping to maintain the highest quality of security data.

Detection & Automation

• Custom Logic: Write custom YARA-L detection rules to correlate cloud posture findings with network traffic.

• Streamline Response: Develop end-to-end SOAR Playbooks and utilize Python to write logic for custom actions, streamlining the customer\'s remediation workflows.

Customer Enablement & Support

• Technical Walkthroughs: Lead sessions for customer analysts, teaching them how to navigate SCC/Wiz findings and investigate alerts within the Google SecOps interface.

• Troubleshooting: Act as the technical point of contact for resolving integration errors and optimizing automation scripts.

Who You Are

• SecOps Expert: You have at least 2 years of strong hands-on experience with Google SecOps (Chronicle), specifically in parser creation, UDM mapping, and YARA-L rule writing.

• Cloud Specialist: You possess proven experience configuring GCP SCC and Wiz, with foundational knowledge equivalent to a Google Cloud Associate Cloud Engineer.

• Automation Minded: You are proficient in Python and enjoy using it to solve complex security automation challenges.

• Independent Driver: You have a demonstrated ability to manage a customer onboarding from technical kickoff to final handoff without constant senior oversight.

• Strategic Communicator: You can translate deep technical configurations into actionable insights for customer security teams.

Nice to Have

• Certified Professional: Current Google Cloud Associate Cloud Engineer or professional security certifications.

• Advanced Scripting: Experience building complex API integrations between cloud security platforms.

• Architectural Vision: Experience advising customers on cloud security best practices and long-term posture management.

Why Join the Foresite Team?

At Foresite, we aren’t just another security provider—we are a mission-driven partner helping organizations navigate an increasingly complex threat landscape. Founded by passionate security practitioners, we’ve grown into a global leader in SecOps and MDR by staying true to our core value: radical transparency.

When you join Foresite, you are part of a "humans-first" culture where your expertise is valued, and your well-being is a priority. We leverage our Google Cloud Premier SecOps Partnership to stay at the cutting edge, but we know that our greatest asset is our people.

What We Offer

• Comprehensive Health & Wellness: Robust medical insurance options to keep you and your family healthy.

• Employer-Covered Insurance: We fully provide employer-paid Dental coverage, as well as Short-Term (STD) and Long-Term Disability (LTD).

• Generous Time Off: We believe in a true work-life balance. You’ll start with 3 weeks of paid vacation, plus additional sick leave and paid company holidays.

• Growth & Mentorship: Access to world-class training. We support your career trajectory, whether you’re looking to deepen your technical skills or move into leadership.

• Impactful Work: Help protect global clients using the latest AI-enhanced security tools and GCP native technologies.