Senior Cyber SecOps Consultant: SIEM & SOAR Expert

Deloitte France; San Antonio (TX); On-site; USD 105,000 - 208,000; Full time

Job summary

Deloitte's Cyber Defense & Resilience team is seeking a Cyber SecOps Senior Consultant to design, implement, and optimize Google SecOps architectures (SIEM/SOAR) for enterprise environments. You will lead log ingestion pipelines, collaborate with SOC analysts, and translate security operations into automated playbooks.

The role requires 7+ years in security operations, a Bachelor's degree, and hands-on experience with Google Cloud SecOps stack, MITRE ATT&CK, Python, and data fabric tools like

Qualifications

• Bachelor's degree in computer science, cybersecurity, information systems, or equivalent work experience.
• 7+ years of experience in security operations, threat detection engineering, or enterprise information technology security.
• Experience with Google Cloud's SecOps tool stack and architecture, specifically security information and event management (SIEM) and security orchestration, automation, and response (SOAR), formerly Google Chronicle and Siemplify.
• Experience with security principles and frameworks such as MITRE ATT&CK and Cyber Kill Chain.
• Experience with Python for automation and integration development.
• Experience with Gostash or Logstash for log normalization and parsing, and with extract, transform, and load (ETL) pipelines and technologies such as Cribl, Bindplane, NXLog, or Kafka.
• Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.
• Preferred: Google Cloud Professional Cloud Architect, Google Cloud Professional Cloud Security Engineer, or Certified Cloud Security Professional certification.
• Experience with threat hunting or cyber threat intelligence.
• Experience with data fabric technologies such as Bindplane or Cribl.
• Experience with infrastructure and networking concepts such as IP networking, VPNs, DNS, load balancing, or firewalls.
• Experience with cloud infrastructure platforms such as AWS or Microsoft Azure.
• Experience with SIEM or SOAR tools such as Splunk, Cortex XSOAR, VirusTotal, Mandiant, or Google Threat Intelligence.
• The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $105,400 to $207,800.

Responsibilities

• Designing and implementing secure, scalable, and resilient Google SecOps architectures for security information and event management (SIEM) and security orchestration, automation, and response (SOAR) deployments aligned with enterprise security policies and regulatory requirements, including General Data Protection Regulation (GDPR) and Payment Card Industry Data Security Standard (PCI DSS)
• Leading deployment of log ingestion pipelines using data fabric technologies and application programming interface integrations, including Bindplane and cloud feeds
• Collaborating with security operations center analysts and threat detection engineers to prioritize, develop, and tune threat detection content within Google SecOps to detect malicious behavior and adversary activity in enterprise environments
• Translating security operations processes into SOAR playbooks and custom integrations to support automated data ingestion, alert enrichment, triage, and response
• Building case management solutions within Google SecOps SOAR, supporting operational metrics and analyst workflows, mentoring junior team members, and staying current on cybersecurity threats, vulnerabilities, and compliance trends
• A successful candidate would possess these skills:

Skills

Independent work

Team collaboration

Communication skills

Attention to detail

Project leadership

Multitasking

Interpersonal skills

Deadline-driven

Guidance to others

Education

Bachelor's degree in computer science, cybersecurity, information systems, or equivalent work experience

Tools

Bindplane

Cribl

NXLog

Kafka

Logstash

Job description

Deloitte's Cyber Defense & Resilience team is seeking a Cyber SecOps Senior Consultant to design, implement, and optimize Google SecOps architectures (SIEM/SOAR) for enterprise environments. You will lead log ingestion pipelines, collaborate with SOC analysts, and translate security operations into automated playbooks.

The role requires 7+ years in security operations, a Bachelor's degree, and hands-on experience with Google Cloud SecOps stack, MITRE ATT&CK, Python, and data fabric tools like