Google SecOps

We are looking for a Google SecOps specialist to join a contract-to-permanent opportunity in Cincinnati, Ohio. This position is ideal for someone who combines strong detection engineering expertise with hands-on incident response triage and can translate security needs into effective custom detections and automated workflows. You will play a key role in strengthening monitoring and response capabilities across Google SecOps environments while partnering with security stakeholders to improve operational readiness.

Responsibilities:
• Design and implement tailored detection rules, alerts, and correlation logic within Google SecOps to improve threat visibility.
• Build and refine response workflows that help security teams investigate and contain incidents more efficiently.
• Perform hands-on triage of security events, validating findings and determining appropriate next steps during active investigations.
• Support the operational rollout of multiple Google SecOps environments by establishing effective detection and response use cases.
• Work with Wiz Defender and related security tools to enhance cloud-focused monitoring and defensive coverage.
• Analyze security telemetry and incident data to identify gaps, tune detections, and reduce false positives.
• Collaborate with internal security and governance partners to align detection content with risk priorities and compliance needs.
• Document detection logic, investigative procedures, and workflow configurations to support repeatable security operations.

Requirements

• Strong hands-on experience with Google SecOps, including creating custom detection content and workflow automation.
• Proven background in detection engineering within enterprise cybersecurity environments.
• Experience conducting direct incident response triage rather than serving only in a coordination or management capacity.
• Working knowledge of Wiz Defender and its use in cloud security monitoring.
• Solid understanding of cybersecurity principles related to data privacy, database security, and file protection.
• Familiarity with cyber governance practices and the ability to align security operations with organizational controls.
• Ability to assess security events, prioritize risk, and communicate technical findings clearly to stakeholders.