SIEM Engineer

Senior SIEM Engineer (Google SecOps) Contract Role 100% Remote (Must be comfortable to support PST)

Key Responsibilities

Onboard, configure, and validate security log sources within Google SecOps. Troubleshoot log ingestion issues, parser errors, and data normalization challenges. Configure and maintain parsers and parser extensions to ensure accurate event processing. Work with the Unified Data Model (UDM) to map, normalize, and validate security event fields. Perform search and query validation to confirm that ingested events are correctly parsed and searchable. Support log source integrations across endpoint security, network detection, privileged access management, and cloud security platforms. Use log forwarding and ingestion pipelines to transport security data reliably into the SIEM environment. Collaborate with SOC analysts, security engineers, and other technical teams to resolve data quality and ingestion issues. Troubleshoot ingestion gaps, malformed events, and parser-related issues to maintain reliable SIEM data availability.

Required Qualifications

At least 3 years of experience in Security Operations and 3 years of hands-on SIEM engineering experience . Expert-level, practical experience with Google SecOps (Chronicle) . Strong hands-on experience with log feeds, ingestion pipelines, parser configuration, parser extensions, and troubleshooting. Working expertise in UDM field mapping, event normalization, and validation . Experience running Google SecOps searches and queries to validate parsed and searchable events. Direct experience onboarding and parsing security logs from at least 3 of the following 4 platforms : SentinelOne Vectra CyberArk Netskope Experience with Bindplane, Chronicle Forwarder, or comparable log ingestion and forwarding technologies. Ability to independently troubleshoot complex log ingestion and parsing issues.