Senior - Cyber Transformation

• Administer, maintain, and optimize the Google Chronicle SIEM platform

• Onboard and manage log sources from cloud, on‑prem, network, and application environments

• Develop and fine‑tune Detection Rules (YARA‑L / UDM rules)

• Conduct threat hunting activities and analyze large datasets using Google Chronicle search capabilities

• Build custom parsers, dashboards, and investigative workbooks

• Monitor SIEM platform performance, ingest pipelines, and data quality

• Collaborate with SOC teams on incident detection, triage, and escalation

• Integrate Chronicle with other GCP security services (SecOps, SCC, Event Threat Detection)

• Implement automated workflows and playbooks (SOAR integrations if applicable)

• Troubleshoot ingestion failures, parsing gaps, and connector issues

• Prepare documentation for SIEM architecture, rule logic, and operational processes

• Ensure alignment with security policies, regulatory compliance, and audit expectations

• 5+ years of experience in SOC engineering or SIEM administration

• Hands‑on experience with Google Chronicle SecOps

• Strong understanding of SIEM concepts, log management, and security analytics

• Experience with UDM (Unified Data Model) and YARA‑L rule creation

• Proficiency in log ingestion pipelines, data normalization, and enrichment

• Good understanding of cybersecurity domains:

  • Incident response

  • Threat detection

  • Network & endpoint security

  • Cloud security (GCP preferred)

• Strong analytical skills and experience with large‑scale data investigations

• Ability to work with APIs for automation and integration

Equal employment opportunity information 

KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.