Technical Consultant - TDR - SOAR Engineer

As a Technical Consultant in Threat Detection Content & Administration, you will manage and maintain security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls. You will develop and deploy use cases, rules, and security policy recommendations to ensure efficient infrastructure functionality.

Your primary responsibilities will include:

• Operate and administer Google Sec Ops (formerly Chronicle Security) and/or
• Palo Alto XSIAM platforms.
• Design, configure, and maintain automation workflows, including playbooks, actions, automations, and rules.
• Develop and maintain custom automation actions using Python.
• Integrate security tools and data sources using REST APIs.
• Analyze indicators of compromise (IOCs), investigate alerts, and support security incident investigations.
• Collaborate with SOC and engineering teams to improve detection, response, and automation maturity across the Sec Ops ecosystem.