Cybersecurity Engineer – Google SecOps/SIEM | Managed Services Operations

Description

The team sits in the Cyber Security practice within Risk Assurance, Compliance and Analytics. It builds analytics and technology that help clients detect, monitor and predict risk across technology, people, systems, processes, culture and physical premises.

Clients get help understanding their current security capability, planning where to direct cyber investment, responding to live incidents, and getting advice on breaches, data privacy and protection law.

The role focuses on managed security services, where engineers take customers from design to production.

Responsibilities

• Lead the rollout of SIEM, EDR and threat detection and response solutions for enterprise clients.
• Design and deliver security monitoring platforms for new builds, transformations and migrations.
• Turn business and technical needs into security architectures that can scale.
• Guide managed-services customers through onboarding, from design to production go-live.
• Connect security, cloud and infrastructure platforms through integrations.
• Use Infrastructure-as-Code, CI/CD and automated deployment to build and run security platforms.
• Build and tune detection content, automation workflows and monitoring use cases.
• Advise client stakeholders and project teams on technical matters.
• Write architecture, implementation and operations documentation.
• Coach engineers and provide technical leadership across delivery teams.
• Support presales work, including solution design workshops and proposals.

Requirements

• 4+ years of hands-on experience delivering cybersecurity engineering or implementation projects.
• A degree in IT, cybersecurity or a related technical field.
• Practical work with enterprise SIEM platforms such as Google SecOps, Microsoft Sentinel, Splunk, QRadar or Elastic.
• Experience designing and implementing security monitoring and detection capabilities.
• Experience leading customer onboarding, migration or transformation projects.
• Experience with Infrastructure-as-Code and DevOps tools such as Terraform, GitHub, GitHub Actions, Azure DevOps or similar.
• Experience automating deployments, configuration management and platform lifecycle tasks.
• Working knowledge of scripting and automation with Python, PowerShell or Bash.
• A solid understanding of cloud platforms and modern enterprise architectures.
• Strong communication and stakeholder management skills.
• English at C1 level or higher.
• Google SecOps implementation or migration experience.
• Experience deploying SIEM content through code repositories and CI/CD pipelines.
• Experience with Terraform modules for Microsoft Sentinel, Google SecOps or cloud-native security services.
• Experience with Kubernetes, container platforms and cloud-native deployments.
• Security, cloud or vendor certifications.
• Experience building reusable engineering frameworks, templates and deployment accelerators.

Conditions

Hybrid working model.

Recruitment runs in four steps: CV verification, a phone screening call with HR, Interview I and Interview II.

Equal-opportunity wording is omitted here, as no such statement appears in the original.

Benefits

• Flexible working through workation and sabbatical leave.
• Full onboarding support, mentoring from experienced colleagues, training sessions and workshops, plus conversations with native speakers.
• Certifications co-financed by the company.
• A medical and wellbeing programme covering medical care, mindfulness, psychological support, webinars and workshops, and financial and legal counselling.
• A personal benefits package you can shape, including a lunch pass, concierge service, veterinary cover for a pet and massages, along with a cafeteria offering vouchers and discounts on IT equipment and car purchases.
• 3 paid volunteering hours per month.
• One additional paid day off for your birthday.
• An employee referral option once you have settled in.