Security Operations Tech Lead

Verily

. Advance cloud detection and response capabilities across Google Cloud Platform (GCP) and AWS.

Posted 11/5/2026full-timeRemote • United StatesSenior💰 $174,500 - $196,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing multi-cloud environments, particularly Google Cloud Platform (GCP) and AWS, with a strong focus on threat detection, telemetry engineering, and Infrastructure as Code (IaC). Proven ability to lead cross-functional initiatives, mentor engineers, and implement robust security controls in regulated environments.

Highest-signal resume keywords

Google Cloud Platform (GCP) SecurityAmazon Web Services (AWS) SecurityInfrastructure as Code (IaC)Security Detection Logic DevelopmentKubernetes Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringSite Reliability Engineering (SRE)Cloud LoggingThreat DetectionCI/CD Deployment PracticesDistributed Systems TroubleshootingHigh-Volume Log Ingestion PipelinesCustom ParsersData ProtectionTechnical Ownership

Soft Skills

MentoringCross-Functional CollaborationProactive Threat HuntingProblem SolvingCommunication

Tools & Technologies

CrowdStrike Falcon Next-Gen SIEMHumio/LogScaleBigQuerySnowflakeTerraformKubernetes (GKE/EKS)Cloud Audit LogsNetwork LogsApplication LogsAutomated Workflows

Industry Keywords

HIPAANIST FrameworksCIS BenchmarksHealthcare SecurityLife Sciences Security

Tech Stack

Tools & technologies

AWSAzureBigQueryCloudCyber SecurityDistributed SystemsGoogle Cloud PlatformKubernetesSnowflakeTerraform

About the role

Key responsibilities & impact

Advance cloud detection and response capabilities across Google Cloud Platform (GCP) and AWS.
Design, test, deploy, and continuously improve detections for complex cloud threats, including identity and access abuse, suspicious application activity, data exposure, and container and Kubernetes attacks.
Drive proactive threat hunting and cloud asset discovery initiatives to identify visibility gaps and prioritize detection coverage across multi-cloud environments.
Own end-to-end telemetry pipelines that collect, parse, normalize, and enrich cloud audit, network, and application logs while balancing investigative value, retention, data protection, and cost efficiency.
Apply Site Reliability Engineering (SRE) principles to telemetry and detection services, establishing SLOs/SLIs for data freshness, availability, and completeness.
Build actionable alerting, recovery procedures, and capacity plans.
Develop software, Infrastructure as Code (IaC), and automated workflows to reduce manual toil and technical debt.
Enforce code review, automated testing, version control, and CI/CD deployment practices for detection content.
Partner with Cloud Infrastructure, Platform, and Product Engineering teams to develop robust security controls.
Provide broad technical ownership, lead cross-functional initiatives, and mentor engineers across the organization.

Requirements

What you’ll need

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience.
8+ years of professional experience in security engineering, site reliability engineering, platform engineering, or security operations with production cloud systems.
Deep technical expertise securing Google Cloud Platform (GCP) or Amazon Web Services (AWS), with a strong focus on IAM, VPC networking, cloud logging, and containerized workloads.
Hands-on experience developing security detection logic, investigating threats, and engineering security telemetry within an enterprise SIEM or modern analytics platform.
Demonstrated experience with Infrastructure as Code (e.g., Terraform), CI/CD pipelines, distributed systems troubleshooting, and production observability.
Advanced expertise with native GCP security services alongside multi-cloud operations across AWS and Azure.
Hands-on experience engineering high-volume log ingestion pipelines, custom parsers, and threat detections using CrowdStrike Falcon Next-Gen SIEM, Humio/LogScale, or modern big data platforms (BigQuery, Snowflake).
Experience designing and implementing security controls within healthcare, life sciences, or heavily regulated environments subject to HIPAA, NIST frameworks, or CIS benchmarks.
Proven experience securing Kubernetes clusters (GKE/EKS), container runtimes, web applications, and AI/ML workloads incorporating Large Language Models (LLMs).
This role is eligible for Verily-sponsored immigration support.

Benefits

Comp & perks

Bonus
Benefits
Verily-sponsored immigration support