Remote SIEM Engineer: Google SecOps & Threat Detection

NAIC; Kansas City (MO); Remote; USD 107,000 - 128,000; Full time

Job summary

NAIC is seeking a SIEM Engineer to design, implement, and maintain the Google SecOps platform across cloud and on-prem sources. You will build dashboards and automate investigation workflows while aligning detections to MITRE ATT&CK and using YARA-L for content tuning.

The role is remote, with residency within 100 miles of Kansas City, MO. Requires a bachelor’s degree and 5+ years in information security, including practical SecOps experience.

Qualifications

• Bachelor’s degree in a computer related field and 5+ years in information security, focusing on security operations.
• Hands-on experience administering Google SecOps (Chronicle) or a similar SIEM.
• Experience with cloud security monitoring across AWS, Azure, or Google Cloud.

Responsibilities

• Design, implement, and maintain the Google SecOps platform, including log ingestion, parsing, and enrichment across cloud, on-premises, SaaS, and security data sources.
• Onboard and monitor new log sources, ensure proper mapping to the Unified Data Model (UDM) and telemetry coverage.
• Develop SecOps dashboards, metrics, and reporting for security monitoring, audits, and executive reporting.
• Create automated investigation and response workflows using Google SecOps capabilities.
• Assist with detection content using YARA-L, aligned to MITRE ATT&CK techniques, reducing false positives.

Skills

Security operations

Threat hunting

Detection engineering

MITRE ATT&CK

Log telemetry

Incident response

Cloud security monitoring

Communication to stakeholders

Education

Bachelor's degree in a computer related field

Tools

Google SecOps (Chronicle)

YARA-L

OpenTelemetry Collectors

EDR/XDR

Threat Intelligence Platforms

Job description

NAIC is seeking a SIEM Engineer to design, implement, and maintain the Google SecOps platform across cloud and on-prem sources. You will build dashboards and automate investigation workflows while aligning detections to MITRE ATT&CK and using YARA-L for content tuning.

The role is remote, with residency within 100 miles of Kansas City, MO. Requires a bachelor’s degree and 5+ years in information security, including practical SecOps experience.