Optiv is hiring a Sr. Google SecOps Engineer | Remote, Canada

Optiv is hiring a Senior Google SecOps Engineer to join our Advanced Fusion Center (AFC) team. You will be dedicated to onboarding and maintaining Google Sec Ops environments for our AFC clients, working within Optiv Security’s 24x7x365 Security Operations Center to create procedures and implement processes across internal and client environments.

What You'll Do

• Serve as a primary responder for AFC customer systems, taking ownership of client configuration issues and tracking through resolution.
• Act as a point of escalation for junior engineers, providing guidance and mentoring.
• Advise on best practices for SIEM/MDR/SOAR products to both technical and non-technical personnel.
• Provide remote consulting services via interactive client sessions to assist with multi-vendor technology implementations.
• Implement and configure SIEM/MDR/SOAR software and appliance-based products in large enterprise and Government environments.
• Develop and maintain security content and reporting.
• Perform knowledge transfers to clients regarding security and system configuration awareness.

What We're Looking For

• 4-7 years professional experience maintaining SIEM or infrastructure systems in Information Security.
• Minimum 18 months hands-on experience in Google Sec Ops.
• College degree or equivalent training with experience in a Security Operations Center, Managed Security, or client network environment.
• Understanding of network architecture and implementation.
• Experience with SIEM content and reporting.
• Experience working with Linux OS.
• Experience writing/developing scripts (e.g., Python, Bash, Ruby, PowerShell).
• Experience with Internal and client Ticketing and Knowledge Base Systems (e.g., Jira, Confluence).
• Ability to participate in on-call support.
• Demonstrated success in a Managed Service client environment.
• Ability to work greater than 40 hours per week as needed.

Nice to Have

• General security knowledge (GIAC, CISSP, CCSE, CISA, HBSS, NSA, CEH, Cisco Security, Security+, or other security certifications).
• Knowledge of Linux and Windows Operating Systems.
• Understanding of server-grade applications: DBMS, Exchange, DNS, SMTP, IIS, Apache, SharePoint, Active Directory, Identity Management, Patch Management, LDAP, SQL.
• Training in non-SIEM network security products: endpoint security, Firewalls, Proxies (Palo Alto, Checkpoint, Juniper, McAfee, Cisco, Blue Coat, Imperva).
• CCNA, CCDA, CCSA, CCIE, CISSP, CEH, or MCSE certifications.
• Familiarity with DevOps.
• Professional experience with networks and network architecture.

Technical Stack

• Google Sec Ops
• SIEM/SOAR/MDR products (Exabeam, Chronicle, Sentinel, LogRhythm, QRadar, Splunk)
• Linux OS
• Scripting: Python, Bash, Ruby, PowerShell
• Tools: Jira, Confluence
• Network Security: Proxies, Firewalls, IDS/IPS, DLP

Team & Environment

You will work in Optiv Security’s 24x7x365 Security Operations Center as a member of the Advanced Fusion Center (AFC) team.

Benefits & Compensation

• Work/life balance.
• Professional training resources.
• Creative problem-solving and the ability to tackle unique, complex projects.
• Volunteer Opportunities ('Optiv Chips In').
• The ability and technology necessary to productively work remotely/from home.

Work Mode

This is a remote position for candidates based in Canada.

Optiv is an equal opportunity employer. All qualified applicants will be considered without regard to race, color, religion, sex, gender identity, sexual orientation, pregnancy, age, marital status, genetic information, national origin, disability, military status, or any other basis protected by law.