Job Description

Job Description – Security Platform Engineer (Google SecOps & BindPlane)

n

The Security Platform Engineer is responsible for operating, maintaining, and enhancing the organisation's security telemetry and analytics platforms with a strong focus on Google SecOps (SIEM/SOAR) and BindPlane. This role ensures reliable telemetry ingestion, platform stability, and seamless data delivery to support detection engineering, incident response, threat hunting, and broader security operations.

n

The ideal candidate brings deep technical hands-on experience with security platforms, data ingestion pipelines, cloud infrastructure, and automation tooling. They will collaborate closely with the SOC, incident response, cloud, and security engineering teams to ensure high-quality, scalable, and resilient security data pipelines and platforms.

n

Key Responsibilities

n

Google SecOps SIEM & SOAR Operations

n

n
- Configure, administer, and maintain Google SecOps SIEM and SOAR environments including tenancy setup, access controls, roles, and permissions.
n
- Operate and ensure ongoing health, performance, availability, and capacity of SIEM and SOAR platforms.
n
- Implement platform configuration changes, upgrades, and feature enhancements.
n
- Troubleshoot and resolve issues related to platform stability, integrations, and data ingestion.
n
- Support detection enablement, platform access requests, and incident-related data queries.
n

n

Telemetry Ingestion & BindPlane Engineering

n

n
- Configure, manage, and maintain BindPlane collectors, agents,



and data ingestion pipelines.
n
- Oversee log and telemetry ingestion from cloud services, infrastructure, applications, and security tools.
n
- Design and maintain parsing, normalisation, enrichment, routing, and delivery pipelines.
n
- Route telemetry to Google SecOps SIEM, BigQuery, and other downstream platforms.
n
- Monitor BindPlane throughput, latency, error rates, data loss, and pipeline health.
n
- Troubleshoot ingestion failures, parsing errors, schema mismatches, and performance bottlenecks.
n

n

Data Architecture, Quality & Reliability

n

n
- Design and implement scalable, resilient, and cost-optimised telemetry ingestion architectures.
n
- Validate data quality, schema consistency, field mapping, and delivery guarantees to support detection and analytics use cases.
n
- Maintain architecture diagrams, pipeline documentation, operational runbooks, and knowledge base content.
n

n

Automation & CI/CD

n

n
- Deploy platform and pipeline updates via CI/CD pipelines.
n
- Read and modify Python and Terraform code used within CI/CD workflows for minor fixes or enhancements.
n
- Integrate platform management tasks into automated deployment and validation processes.
n

n





Incident & Operational Support

n

n
- Provide platform-level support during security incidents and investigations, ensuring data availability, integrity, and timely access.
n
- Assist SOC and incident response teams with telemetry validation, platform troubleshooting, and detection enablement.
n
- Collaborate with cloud engineering, infrastructure, DevOps, and security teams to improve reliability and operational maturity.
n

n

Required Skills & Experience

n

n
- Hands-on experience with Google SecOps SIEM/SOAR platforms.
n
- Expertise in BindPlane or similar telemetry ingestion technologies.
n
- Strong understanding of log formats, schemas, parsing, enrichment, and data routing.
n
- Familiarity with cloud environments (e.g., Google Cloud Platform, AWS, Azure).
n
- Experience troubleshooting data ingestion pipelines and performance issues.
n
- Ability to read and modify basic Python and Terraform code.
n
- Experience with CI/CD pipelines and automated deployments.
n
- Strong incident support and cross-team collaboration skills.
n

n

Preferred Qualifications

n

n
- Experience with BigQuery or other cloud-based analytics platforms.
n
- Understanding of detection engineering concepts and operational security telemetry requirements.
n
- Background in SOC operations, cloud engineering, or security engineering.
n
- Certifications such as Google Skilled Cloud Security Engineer, Google SecOps, or equivalent (nice to have).
n

n

#J-18808-Ljbffr

📌 Security Platform Engineer (New South Wales)
🏢 The HR Ally
📍 New South Wales