25 Aug
|
Umbrella Club
|
Sydney
25 Aug
Umbrella Club
Sydney
Security Platform Engineer – Google SecOps & BindPlane
We are looking for an experienced Security Platform Engineer to operate, maintain and enhance security telemetry and analytics platforms, with a strong focus on Google SecOps (SIEM/SOAR) and BindPlane.
The role will ensure reliable telemetry ingestion, platform stability and high-quality security data pipelines supporting detection engineering, incident response, threat hunting and security operations.
Key Responsibilities
- Configure, administer and maintain Google SecOps SIEM/SOAR environments, including access controls, roles and permissions.
- Monitor platform health, performance, availability and capacity.
- Implement platform configuration changes, upgrades and enhancements.
- Configure and manage BindPlane collectors, agents and telemetry ingestion pipelines.
- Manage log and telemetry ingestion from cloud services, infrastructure, applications and security tools.
- Design and maintain parsing, normalisation, enrichment, routing and delivery pipelines.
- Route telemetry to Google SecOps, BigQuery and other downstream platforms.
- Monitor throughput, latency, error rates, data loss and pipeline health.
- Troubleshoot ingestion failures, parsing errors, schema mismatches and performance issues.
- Design scalable, resilient and cost-optimised telemetry ingestion architectures.
- Validate data quality, schema consistency, field mapping and delivery for security analytics and detection use cases.
- Support platform and pipeline deployments through CI/CD.
- Read and modify basic Python and Terraform code.
- Provide platform-level support during security incidents and investigations.
- Collaborate with SOC, Incident Response, Cloud, DevOps, Infrastructure and Security Engineering teams.
Required Skills & Experience
- Hands-on experience with Google SecOps SIEM/SOAR.
- Robust experience with BindPlane or similar telemetry ingestion technologies.
- Strong understanding of log formats, schemas, parsing, enrichment and data routing.
- Experience with cloud environments such as GCP, AWS or Azure.
- Experience troubleshooting data ingestion pipelines and performance issues.
- Ability to read and modify basic Python and Terraform code.
- Experience with CI/CD pipelines and automated deployments.
- Strong incident support and cross-team collaboration skills.
Desirable
- Experience with BigQuery or other cloud analytics platforms.
- Understanding of detection engineering and security telemetry requirements.
- Background in SOC Operations, Cloud Engineering or Security Engineering.
- Google Cloud Security / Google SecOps certifications or equivalent.
If this sounds like you, apply now or contact Anupama Cavuturi on 0486 199 174 for a confidential discussion #GoogleSecOps #BindPlane #SIEM #SOAR #SecurityOperations #LogManagement #Telemetry #GCP #BigQuery #Python #Terraform #CICD #CloudSecurity #IncidentResponse
📌 Google SecOps Platform Engineer (Sydney)
🏢 Umbrella Club
📍 Sydney