FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in security operations, including the creation and maintenance of detection rules using YARA-L 2.0 and UDM, while leveraging automation through Google SecOps SOAR and Python. Proficient in incident response, threat hunting, and integrating various security technologies to enhance detection and response capabilities.
Highest-signal resume keywords
Google SecOps SIEMYARA-L 2.0Unified Data Model (UDM)Threat HuntingIncident Response
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
PythonREST APIsDetection RulesAutomationSOC OperationsMITRE ATT&CKCloud EnvironmentsScriptingVersion ControlMalware Analysis
Tools & Technologies
Google SecOps SOAREDRITSMFirewallsThreat IntelligenceSplunkSentinelQRadarElasticGemini
Industry Keywords
Detection-as-CodeDigital ForensicsRegulated EnvironmentsLog IngestionNetwork Protocols
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud PlatformITSMLinuxPythonSplunk
About the role
Key responsibilities & impact- Take a leading role in advancing security operations
- Create, enhance, and maintain detection rules in YARA-L 2.0
- Normalize and analyze events using UDM (Unified Data Model)
- Build playbooks and automations in Google SecOps SOAR
- Integrate EDR, IdP, firewall, cloud, ITSM, and Threat Intelligence sources
- Map security coverage to MITRE ATT&CK
- Conduct Threat Hunting and support the response to high-severity incidents
- Monitor log ingestion and quality
- Use Python, REST APIs, and Git for automation and detection-as-code
- Continuously enhance the SOC’s detection and response capabilities
Requirements
What you’ll need- Hands-on experience with Google SecOps, including both SIEM and SOAR
- Strong command of YARA-L 2.0 and UDM
- Experience in SOC operations, detection, investigation, and incident response
- Applied knowledge of MITRE ATT&CK
- Solid knowledge of Windows, Linux, networks, and protocols
- Experience with at least one cloud environment: GCP, AWS, or Azure
- Knowledge of scripting and automation, preferably Python
- Familiarity with Git and version control
- Preferred qualifications: experience with Gemini in Security Operations, Splunk, Sentinel, QRadar, or Elastic; detection-as-code; malware analysis; digital forensics; and regulated environments
Benefits
Comp & perks- Diversity and inclusion: Black professionals, women, professionals with disabilities, LGBTQIA+ community members, and people of all ages are encouraged to apply
- Recognized as the Best Financial Institution to Work For in the 2025 GPTW ranking