Senior Security Operations Engineer
Sword, Remote - US
What you will do
- Design and continuously improve detection and alerting controls, ensuring high fidelity and contextual relevance to reduce noise and enable rapid response.
- Architect, refine, and maintain custom YARA-L detection rules and SOAR playbooks in Google SecOps to automate triage, alert enrichment, and initial incident response.
- Drive prioritization of alerts using a data-driven, scalable triage framework, aligned with business impact and threat context.
- Lead end-to-end incident investigations in Google SecOps, leveraging complex telemetry correlation to proactively hunt for threats, contain active incidents, and drive root-cause remediation.