Automation SecOps Engineer

Role overview

This role focuses on connecting Google SecOps SIEM with CrowdStrike EDR and building automation that streamlines the entire security case workflow. The goal is to cut down repetitive manual work for the security operations team while improving speed and consistency in triage and response.

Core responsibilities

• Create, maintain, and tune SOAR playbooks in Google SecOps to automate triage, investigation, and remediation activities.
• Link Google SecOps SIEM with CrowdStrike EDR and other security data sources so alerts can be ingested and correlated smoothly.
• Automate the complete security case journey, including log ingestion, alert generation, triage, false-positive or true-positive classification, Archer incident creation, and closure.
• Write Python-based automation and scripts that reduce the number of manual steps required from analysts across the ACDC.
• Use REST APIs to connect with external security platforms for orchestration and enrichment.
• Investigate, troubleshoot, and enhance existing SOAR workflows and automation pipelines.

Required skills and experience

The ideal candidate should have practical experience with Google SecOps, especially Chronicle SIEM and SOAR playbooks, along with strong Python scripting skills for automation work. Hands-on REST API integration experience is mandatory, and familiarity with CrowdStrike EDR is considered an advantage for alert ingestion and automated response use cases. Working knowledge of Git is also expected for managing code and SOAR configurations.

Preferred knowledge

• Exposure to CI/CD tools such as Jenkins or GitHub Actions for rolling out SOAR updates.
• Entry-level security certification such as CompTIA Security+ or an equivalent credential.
• Basic familiarity with AWS or Azure for security-related integrations.
• Experience using Grafana or similar tools for SOC reporting and metrics dashboards.

Education and eligibility

Applicants should hold a full-time Bachelor’s or Master’s degree in a technical discipline. Candidates from any graduation background are eligible to apply, provided they have the relevant experience.

Experience requirement

The position calls for 3 to 5 years of hands-on experience in security operations, security automation, or a SOC/SIEM engineering environment, with proven ability to build SOAR playbooks, develop automation workflows, and integrate security tools through REST APIs.

Additional information

This opportunity is with a German-based product organization. The compensation shown for the role is INR 10,00,000 to INR 18,00,000 per year.