Senior SecOps Engineer - Cloud Security Lead

Softthink Solutions Inc; Washington (District of Columbia); On-site; USD 170,000 - 210,000; Full time

Job summary

Softthink Solutions Inc. is seeking a Lead SecOps Engineer (Cloud Sec Spec 3) in Washington, DC to drive the design, build, and operation of the SBA Google SecOps Enterprise Plus environment.

You will oversee SIEM/SOAR architecture, data pipelines, threat intelligence integration, and ensure FedRAMP High compliance. Responsibilities include architecting ingestion from multiple sources, validating parser coverage for 700+ log types, and leading advanced detections, UEBA, and investigation

Qualifications

• 10+ years of experience in cloud security engineering, SIEM/SOAR architecture, or enterprise security operations.
• Extensive experience with Google SecOps, BigQuery UDM, and cloud-native security platforms.

Responsibilities

• Lead the design and implementation of the Google SecOps Enterprise Plus tenant.
• Architect ingestion pipelines from Microsoft Sentinel, Entra ID, AWS GovCloud, and on‑premises log sources.
• Validate parser coverage across 700+ supported log types.
• Oversee deployment of curated detections, UEBA, and Gemini-assisted investigation workflows.
• Direct integration of Zero Trust and IAM telemetry (Okta, Entra).
• Ensure platform alignment with SBA insider‑threat and privileged‑access monitoring requirements.
• Provide senior-level guidance across Initiate & Design, Build & Integrate, Detect & Tune, Operationalize & Transition.
• Support runbook development, training, and transition to steady-state operations.

Skills

Cloud security engineering

SIEM/SOAR architecture

Google SecOps

Data ingestion pipelines

Threat intelligence integration

Zero Trust

IAM telemetry

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems

Tools

Google SecOps

BigQuery UDM

Azure

AWS GovCloud

Job description

Softthink Solutions Inc. is seeking a Lead SecOps Engineer (Cloud Sec Spec 3) in Washington, DC to drive the design, build, and operation of the SBA Google SecOps Enterprise Plus environment.

You will oversee SIEM/SOAR architecture, data pipelines, threat intelligence integration, and ensure FedRAMP High compliance. Responsibilities include architecting ingestion from multiple sources, validating parser coverage for 700+ log types, and leading advanced detections, UEBA, and investigation