Cyber - Google SecOps - Senior Consultant

Deloitte T.T.L.
Miami, FL, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
7 years minimum
Working hours
Regular working hours

Tech stack

Cyber Security Information Systems Extract Transform Load (ETL) IT Management Python (Programming Language) Parsing PCI Data Security Standards Logstash Security Information and Event Management Google Cloud Data Ingestion Mitre Att&ck
+5 more
Information Technology Enterprise Integration Apache Kafka Cyber Warfare Api Management

Job description

Experteer Overview In this role, you will help clients strengthen cyber operations by designing and delivering scalable SecOps solutions on Google Cloud, including SIEM and SOAR deployments. You will work with cross-functional teams to implement threat detection, automation, and efficient incident response. The role emphasizes hands-on engineering, threat intelligence, and process automation to improve monitoring, detection, and operational resilience. You will impact clients’ security posture and compliance posture while staying current with evolving threats and industry standards. Compensation / Benefits * Design and implement secure, scalable Google SecOps architectures for SIEM and SOAR aligned with security policies and regulatory requirements (GDPR, PCI DSS) * Lead log ingestion pipeline deployments using data fabric tech and API integrations (Bindplane, cloud feeds) * Collaborate with SOC analysts and threat detection engineers to tune threat content within Google SecOps * Translate security operations processes into SOAR playbooks and custom integrations for automated ingestion, enrichment, triage, and response * Build case management solutions within Google SecOps SOAR, support analyst workflows, mentor juniors, and stay updated on threats and compliance trends Tasks * Bachelor’s degree in computer science, cybersecurity, information systems, or equivalent work experience * 7+ years of experience in security operations, threat detection engineering, or enterprise IT security * Experience with Google Cloud’s SecOps stack (SIEM and SOAR, formerly Chronicle and Siemplify) * Experience with MITRE ATT&CK and Cyber Kill Chain * Experience with Python for automation and integration development * Experience with Gostash or Logstash for log normalization and parsing, and with ETL pipelines and tools like Cribl, Bindplane, NXLog, or Kafka * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements *

Requirements

and security operations processes into SOAR playbooks and custom integrations for automated ingestion, enrichment, triage, and response * Build case management solutions within Google SecOps SOAR, support analyst workflows, mentor juniors, and stay updated on threats and compliance trends Tasks * Bachelor’s degree in computer science, cybersecurity, information systems, or equivalent work experience * 7+ years of experience in security operations, threat detection engineering, or enterprise IT security * Experience with Google Cloud’s SecOps stack (SIEM and SOAR, formerly Chronicle and Siemplify) * Experience with MITRE ATT&CK and Cyber Kill Chain * Experience with Python for automation and integration development * Experience with Gostash or Logstash for log normalization and parsing, and with ETL pipelines and tools like Cribl, Bindplane, NXLog, or Kafka * Ability to travel ~50% * Limited immigration sponsorship may be available Key requirements *

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:37 min

Introduction to Apache Kafka benchmarking and performance analysis

Kirill Kulikov · LIVE

1:31 min

Exploring the core components of the ELK stack

Derek Binkley · LIVE

2:56 min

Open-sourcing a complex parsing library for game data

Johan Hutting Johan Hutting · WWC 2024

5:01 min

Bridging the gap between software development and security

Vandana Verma · LIVE

1:39 min

Defining Apache Kafka and its primary real-time use cases

Lucia Cerchie · LIVE

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

Videos

See all

Related articles

See all