Sr. SOC Engineer

📋 Description

• CNAPP & SecOps Integration: Orchestrate data flow from Zimperium's CNAPP platform into Google
• Google SecOps Platform Engineering: Own and maintain Google SecOps as the operational hub—SOAR
• Investigative Leadership: Lead investigations into high-severity and complex incidents, conduct
• SOC Automation & Tooling: Write or adapt tools and scripts (Python, Go, Bash) to automate SOC
• Metrics & Reporting: Define, instrument, and own SOC KPIs—detection latency, mean time to
• On-Call & Incident Response: Serve as incident commander or key investigator for high-priority

🎯 Requirements

• 8+ years in security operations, threat detection, or incident response, with at least 4 years in a
• Deep hands-on experience with at least one major SIEM platform (Splunk, ELK, Chronicle/Google
• Strong understanding of log types and sources—OS logs, application logs, network flow, DNS, proxy
• Experience building or tuning threat detection rules and correlation logic. Working knowledge of
• Proficiency in at least one scripting/programming language (Python, Go, Bash) sufficient to build
• Experience integrating security tools—APIs, webhooks, orchestration platforms (Zapier, Make, native