Job Title: Google Chronicle SIEM Engineer

Experience: 8 – 10 Years

Location: Hyderabad or Mumbai

Job Type: Full-Time

Position Overview:

We are seeking a Google Chronicle SIEM Engineer to lead and enhance our Security Operations Center (SOC) capabilities. This hands-on role involves:

SIEM administration
Security alert monitoring
Threat intelligence integration
Automation development

...to strengthen our cybersecurity posture.

Key Responsibilities:

SIEM Administration:

Deploy, configure, and manage Google Chronicle SIEM.
Manage user access, upgrades, log sources, and report generation.
Troubleshoot and resolve SIEM-related issues to maintain optimal performance.

Security Alert Monitoring & Incident Response:

Continuously monitor security alerts generated by Google Chronicle SIEM.
Perform log analysis, correlation, and investigation of security events.
Prioritize, escalate, and respond to security incidents as per incident response playbooks.
Collaborate with SOC analysts and security teams to mitigate threats effectively.

Security Use Case Development:

Develop and optimize detection rules, correlation queries, and dashboards to enhance threat visibility.
Create custom parsers, playbooks, and automation workflows to improve SOC efficiency.
Align security alerts and detection mechanisms with the MITRE ATT&CK framework.

Threat Intelligence & Forensics:

Integrate threat intelligence feeds with Google Chronicle SIEM to detect emerging threats.
Conduct forensic analysis on compromised systems and investigate Indicators of Compromise (IoCs).
Collaborate with red team/blue team exercises to enhance security defenses.

SOAR Platform Administration:

Develop automated security workflows and playbooks to accelerate threat response.
Integrate Google Chronicle SIEM with SOAR tools for enhanced incident automation.

Technical Troubleshooting & Vendor Coordination:

Collaborate with Google Chronicle support and other third-party vendors for issue resolution.
Continuously improve SIEM performance, scalability, and security operations workflows.

Qualifications:

Education & Experience:

Bachelor's degree in Computer Science, Information Security, or a related field.
Minimum of 1 year of experience in SIEM administration, security monitoring, and incident response.

Technical Skills:

Strong knowledge of network protocols, security architectures, and cloud security principles.
Proficiency in log analysis, correlation, and threat hunting.
Experience with programming/scripting languages (Python, PowerShell, or Bash) for automation.
Familiarity with MITRE ATT&CK, NIST, and SOC best practices.

Certifications (Preferred):

Google Chronicle SIEM
Security certifications such as CISSP, CISM, GIAC, CEH, or Security+