Google SecOps Engineer

Job Overview

Join Tata Consultancy Services as a Google SecOps Engineer based in Kochi, Kerala. This role requires expertise in designing, implementing, and optimizing Google Chronicle SIEM environments to enable efficient and scalable log ingestion and security monitoring.

Key Responsibilities

• Architect and deploy Google Chronicle SIEM solutions for log ingestion, parsing, normalization, and enrichment at scale.
• Develop, update, and tune correlation rules and use cases to enhance threat detection capabilities.
• Create and refine detection rules, parsers, and correlation logic to increase threat accuracy.
• Integrate a wide array of log sources such as firewalls, endpoint security, cloud platforms, IAM, and network devices.
• Build and maintain custom parsers and dashboards to improve visibility of security events.
• Work collaboratively with threat hunting and detection engineering teams to design new detection logic.
• Implement automation workflows using SOAR or API-based tools to streamline analyst tasks and reduce response times.
• Automate alert triage, data enrichment, and response actions through scripts, playbooks, or orchestration frameworks.
• Integrate Google Chronicle with automation platforms including Cortex XSOAR, Splunk SOAR, Swimlane, or custom Python frameworks.
• Deploy and manage Bind Plane agents on servers and cloud workloads for robust data collection.
• Configure data ingestion pipelines from diverse sources including Windows, Linux, databases, firewalls, and cloud services.
• Normalize data schemas and forward processed logs to SIEM or observability solutions such as Chronicle, Elastic, or Splunk.
• Design and manage Cribl Stream pipelines for log, metric, and trace ingestion, including data filtering, sampling, and transformation to optimize SIEM licensing costs.
• Construct data routing rules to direct telemetry to multiple endpoints such as SIEM systems, S3 buckets, or data lakes.
• Administer Cribl deployments including workers, leaders, and edge components.

Addition Information

The interview will be conducted face-to-face on 12th September 2026 at the Kochi location. Candidates should have between 6 and 12 years of relevant experience in SecOps with Google Chronicle technologies.