Cyber Security Analyst

Company : TCS

Skill : Google SecOps

Experience : 4 to 15 Years

Location : Bengaluru and Chennai

Interview Mode : Face to Face (Walkin)

Interview Date : 13th June 2026 (Saturday)

Job Description :

SIEM Engineering & Platform Management

• Design, deploy, configure, and manage Google SecOps (Chronicle SIEM) environments
• Onboard and normalize log sources including:
• Network devices (firewalls, proxies, IDS/IPS)
• Endpoint security solutions
• Cloud platforms (GCP, AWS, Azure)
• Identity and SaaS applications
• Develop and maintain parsers, ingestion pipelines, and data retention strategies

Detection Engineering & Use Case Development

• Develop, tune, and optimize detection rules using YARA‑L
• Create security use cases mapped to MITRE ATT&CK
• Reduce false positives through continuous tuning and baselining
• Perform proactive threat hunting using Chronicle search capabilities

Incident Support & SOC Enablement

• Support SOC teams with alert triage, investigation queries, and workflows
• Build dashboards, visualizations, and reports for security operations
• Assist in root cause analysis and post-incident improvement activities

Automation & Integration

• Integrate Chronicle with security tools such as:
• SOAR platforms
• Ticketing systems (ServiceNow, Jira)
• EDR/XDR solutions
• Develop automation and enrichment workflows using APIs and scripting

Continuous Improvement & Governance

• Ensure SIEM solution aligns with security standards and compliance needs
• Document use cases, detection logic, ingestion processes, and runbooks
• Stay current with evolving threats and Google SecOps capabilities

Required Skills & Experience

Technical Skills

• Strong experience with Google SecOps / Chronicle SIEM
• Proficiency in YARA‑L rule development
• Solid understanding of:
• SIEM architecture and log lifecycle
• Security event correlation and analytics
• MITRE ATT&CK framework
• Experience with cloud security logging (GCP preferred)
• Knowledge of networking, OS concepts, and security controls
• Scripting skills (Python, Bash, or similar are preferred)

Security Domain Knowledge

• Incident detection and response
• Threat hunting and adversary behavior
• Malware, phishing, and insider threat analysis

Preferred / Nice‑to‑Have Skills

• Experience with SOAR tools (Cortex XSOAR, Chronicle SOAR, etc.)
• Certifications such as:
• Google Cloud Security Engineer
• GCED / GCIH / GCIA
• CISSP or equivalent
• Experience working in SOC, MSSP, or large enterprise environments

Exposure to Compliance frameworks (ISO 27001, SOC2, PCI‑DSS)