Security Engineer • Senior

Who you are

You have a Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field, along with 5 years of experience in system administration, engineering, or a related technical role. Your background includes working with SOC/CSIRT or other incident response teams, giving you a solid understanding of the cybersecurity landscape. You are proficient in networking, including TCP/IP protocols and network topology, and have experience with scripting languages such as PowerShell and Python.

Your expertise extends to configuring and maintaining SIEM and SOAR technologies, and you have a strong grasp of security controls for common platforms and devices, including Linux and network equipment. You possess certifications such as CompTIA Security+, CompTIA Network+, CISCO (CCNA), or ISC2 (CISSP), which further validate your skills in the field. You are capable of simplifying and communicating complex ideas effectively, making you a valuable collaborator in cross-functional teams.

What you'll do

In this role, you will engage with multiple cross-functional teams, including Mandiant Architects and Analysts, to enable the technology and tools required for effective operations within a Cyber Defense Center. You will create and modify SIEM use cases using technology-specific query languages and Sigma open signature formats, ensuring that the systems are optimized for incident detection and response.

You will also be responsible for creating and modifying SOAR playbooks written in Python, integrating APIs into automation workflows to enhance incident response efficiency. Your role will involve managing and maintaining EDR and Network Detection and Response technologies, ensuring that the organization is equipped to handle security incidents effectively.

Collaboration with client stakeholders and other groups within the customer environment will be key to driving resolution for security issues. You will provide your expertise in SIEM, SOAR, and other SOC technologies, assisting in incident response and ensuring that the organization maintains a robust security posture.

What we offer

At Google, you will be part of a dynamic team that values innovation and collaboration. We offer competitive compensation and benefits, along with opportunities for professional growth and development. You will work in a supportive environment that encourages you to apply even if your experience doesn't match every requirement. Join us in making a significant impact in the field of cybersecurity.