Assistant / Deputy Manager - Google SecOps SIEM

About the Company

Deloitte Shared Services India is a prominent professional services firm operating across major Indian cities including Mumbai, Delhi, Chennai, Bangalore, Kochi, Kolkata, Bhubaneshwar, Coimbatore, and Hyderabad. The firm provides a diverse spectrum of consulting services aimed at fostering local business growth, expanding market reach, and facilitating business investments within India. Deloitte brings global insights and broad expertise to address complex business challenges and deliver exceptional value to its clients.

Role Overview

The position is for an Assistant or Deputy Manager specializing in Google SecOps SIEM engineering within cybersecurity. The role involves designing, deploying, and managing SIEM solutions focused on Google SecOps, supporting SOC teams with incident detection and response, and ensuring the integration of SIEM tools with other security technologies.

Key Responsibilities

• Design, deploy, configure, and maintain SIEM systems with emphasis on Google SecOps.
• Onboard and normalize log sources from various servers, network devices, cloud platforms, applications, and security tools.
• Develop and fine-tune correlation rules, alerts, dashboards, and reports to enhance security monitoring accuracy.
• Optimize SIEM performance by reducing false positive alerts through tuning and enhancements.
• Support Security Operations Center (SOC) teams during incident detection, analysis, and response activities.
• Integrate SIEM with Security Orchestration, Automation, and Response (SOAR) platforms, Endpoint Detection and Response (EDR), Identity and Access Management (IAM), cloud security solutions, and threat intelligence feeds.
• Develop use cases aligned with the MITRE ATT&CK framework to improve threat detection capabilities.
• Ensure compliance with relevant security standards and regulations including ISO 27001, SOC 2, PCI-DSS, and HIPAA.
• Troubleshoot issues related to SIEM ingestion, log parsing, and data quality.
• Automate repetitive tasks using scripting languages such as Python, PowerShell, and Bash.
• Participate in security audits, threat hunting exercises, and contribute to ongoing cybersecurity improvements.
• Maintain documentation covering SIEM architecture, procedures, and operational runbooks.

Qualifications and Experience

• 4 to 8 years of professional experience in cybersecurity, particularly focused on Google SecOps SIEM engineering.
• Practical hands-on experience with at least one major SIEM platform.
• Strong knowledge of log management, event correlation, and network security components such as firewalls, IDS/IPS, and VPNs.
• Experience with operating systems including Linux and Windows.
• Proficiency in cloud platforms such as AWS, Azure, and Google Cloud Platform (GCP).
• Technical skills including regex, log parsing, and normalization of data.
• Understanding of threat intelligence and attack frameworks like MITRE ATT&CK.
• Proven scripting experience in Python, PowerShell, and shell scripting.
• Familiarity with SOC operations and incident response workflows.
• Relevant SIEM certifications such as Google SecOps, Splunk Certified Architect, QRadar Admin, or Azure Sentinel.
• Security certifications including CEH, GCED, GCIH, or CISSP are preferred.
• Exposure or knowledge of SOAR platforms, automation, DevSecOps practices, and CI/CD security integrations is advantageous.
• Educational qualifications: Bachelor’s or Master’s degree, BCA, or equivalent relevant certifications.