Remote SIEM Engineer - Google SecOps & Detection

National Association of Insurance Commissioners; Kansas City, Northern (MO, KY); Hybrid; USD 107,000 - 128,000; Full time

Job summary

The National Association of Insurance Commissioners is seeking a SIEM Engineer to design, implement, and maintain the Google SecOps platform. This remote role requires residency within 100 miles of Kansas City, MO, and involves onboarding log sources, building dashboards, and automating investigations to enhance threat detection across cloud and on‑prem environments.

Ideal candidates have a computer-related degree with 5+ years in information security, hands-on SecOps experience, and familiarity

Qualifications

• Bachelor’s degree in a computer-related field and 5+ years in information security.
• Hands-on experience administering Google SecOps (Chronicle) or an equivalent enterprise SIEM.
• Experience with cloud security monitoring across AWS, Azure, or Google Cloud.

Responsibilities

• Design, implement, and maintain the Google SecOps platform, including log ingestion, parsing, normalization, and enrichment.
• Onboard, validate and monitor new log sources within Google SecOps, ensuring proper mapping to the UDM.
• Develop Google SecOps dashboards, operational metrics, and reporting for security monitoring and audits.
• Develop and maintain automated investigation and response workflows using Google SecOps capabilities.
• Advance detection content using YARA-L aligned to MITRE ATT&CK techniques and reduce false positives.

Skills

Security telemetry

Log parsing

Data normalization

Threat detection

Incident response

MITRE ATT&CK

YARA-L

UDM

EDR/XDR

Threat intelligence

Cloud security monitoring

Communication

Education

Bachelor’s degree in a computer-related field

Tools

Google SecOps (Chronicle)

OpenTelemetry Collectors

AWS

Azure

Windows Event Logging

Sysmon

Job description

The National Association of Insurance Commissioners is seeking a SIEM Engineer to design, implement, and maintain the Google SecOps platform. This remote role requires residency within 100 miles of Kansas City, MO, and involves onboarding log sources, building dashboards, and automating investigations to enhance threat detection across cloud and on‑prem environments.

Ideal candidates have a computer-related degree with 5+ years in information security, hands-on SecOps experience, and familiarity