Job Description

Key Responsibilities

Technical Leadership & Platform Engineering
Architecture & Strategy: Oversee the end-to-end architecture of the Google SecOps platform, including data ingestion pipelines (UDM), storage, and multi-cloud integrations.
Detection Engineering: Guide the team in developing sophisticated detection logic using YARA-L or UDM and managing the lifecycle of detections to reduce false positives, increase true positives, nullify false negatives, and broaden the coverage of MITRE ATT&CK.
SOAR Automation: Lead the design and implementation of automated incident response playbooks to reduce Mean Time to Respond (MTTR) and manual routing or mundane efforts.
Continuous Improvement: Drive the adoption of security operations principles to ensure the platform is meeting the engineering requirements of the SOC & IT.
Solution Customization: Ability to design and implement workarounds for technical issues, and ability to develop and implement customization to meet the delivery requirements.
E2E Management: Ability to manage the Google SecOps platform End-to-End along with the required project management in Google Cloud Platform.
People Management & Team Development
Mentorship: Act as a technical mentor to senior and junior engineers, conducting deep-dive code/logic reviews and architectural assessments.
Talent Growth: Manage performance cycles, career development plans, and hiring to build a diverse, world-class SecOps engineering team.
Culture: Foster a blameless engineering culture focused on iterative learning, automation over manual effort.
Delivery & Value Realization
Roadmap Management: Translate business, operational and functional requirements into technical deliverables and ensure the timely delivery of engineering items.
Stakeholder Alignment: Collaborate with SOC Leads, CISO office, and different IT teams to ensure the platform meets operational needs.
Metric-Driven Output: Define and report on key performance indicators (KPIs) such as data ingestion health, detection coverage (MITRE ATT&CK mapping), and automation ROI.