Assistant/Deputy Manager - Google Security Operations (SecOps) SIEM Engineering

About Deloitte Shared Services India

Deloitte Shared Services India is a leading professional services firm with a significant presence across major Indian cities including Mumbai, Delhi, Chennai, Bangalore, Kochi, Kolkata, Bhubaneshwar, Coimbatore, and Hyderabad. We assist businesses in expanding locally and globally by delivering comprehensive consulting solutions to achieve their strategic goals with insightful global perspectives.

Role Overview

We are looking for a skilled Assistant or Deputy Manager specialized in Google Security Operations with a focus on SIEM engineering. The ideal candidate will have 4-8 years of cybersecurity experience, particularly with Google SecOps and other major SIEM platforms, and extensive knowledge across log management, network security, cloud environments, and SIEM automation.

Key Responsibilities

• Design, implement, configure, and manage SIEM solutions with emphasis on Google SecOps.
• Onboard and normalize logs from various sources including servers, network devices, cloud platforms (AWS, Azure, GCP), applications, and security tools.
• Create and refine correlation rules, alerts, dashboards, and reports to enhance detection capabilities.
• Optimize SIEM performance to minimize false positives and improve operational efficiency.
• Collaborate with SOC teams in detecting, analyzing, and responding to security incidents.
• Integrate SIEM platforms with SOAR, EDR, IAM, cloud security solutions, and threat intelligence feeds.
• Develop use cases aligned with the MITRE ATT&CK framework.
• Ensure compliance with relevant security frameworks and regulations such as ISO 27001, SOC 2, PCI-DSS, and HIPAA.
• Investigate and resolve issues related to data ingestion, parsing, and quality within SIEM.
• Automate routine processes utilizing scripting languages including Python, PowerShell, and Bash.
• Participate proactively in security audits, threat hunting, and continuous improvement measures.
• Maintain thorough documentation for SIEM architecture, procedures, and operational runbooks.

Candidate Requirements

• Possess 4-8 years in cybersecurity with a strong focus on Google SecOps SIEM engineering.
• Hands-on experience with at least one major SIEM platform such as Google SecOps, Splunk, QRadar, or Azure Sentinel.
• Comprehensive understanding of log management and event correlation techniques.
• Experienced with network security technologies including firewalls, IDS/IPS, and VPNs.
• Familiarity with operating systems including Linux and Windows environments.
• Practical knowledge of cloud platforms such as AWS, Azure, and Google Cloud Platform.
• Skill in regex, log parsing, and data normalization.
• Familiarity with threat intelligence and understanding of attack methodologies as defined by the MITRE ATT&CK framework.
• Proficient in scripting languages including Python, PowerShell, and Shell scripting.
• Experience working within SOC operations and incident response frameworks.
• Relevant certifications such as Google SecOps, Splunk Certified Architect, QRadar Administrator, Azure Sentinel, CEH, GCED, GCIH, or CISSP.
• Exposure to SOAR platforms, automation technologies, and DevSecOps/CI/CD security integration.
• Educational qualification includes Bachelor's or Master’s degree or BCA in a related field.