Application Security Engineer
Summary
Designs and automates security detection pipelines, writes YARA-L rules, and builds SOAR playbooks to hunt threats and respond to incidents using Google SecOps.
- Responsibilities:
- Design and implement scalable log ingestion pipelines and develop custom parsers for diverse data sources to ensure high-quality telemetry.
- Develop, test, and tune sophisticated detection rules using YARA-L to identify emerging threats.
- Build and automate complex incident response playbooks within the SOAR component to reduce mean time to respond (MTTR).
- Perform proactive threat hunting and forensic investigations leveraging Google Threat Intelligence.
- Minimum Qualifications:
- Deep expertise in Google SecOps, including the unified SIEM and SOAR platform (formerly Chronicle).
- Proficiency in writing YARA-L rules and a thorough understanding of the Unified Data Model (UDM) for log normalization. Hands-on experience with security automation, orchestration, and integrating third-party tools via APIs.
- Preferred Qualifications: Google Cloud Professional Security Engineer certification.