Cyber - Google SecOps - Manager

Deloitte
Deloitte

San Jose, CA, USA · San Francisco, CA, USA · Portland, OR, USA · Austin, TX, USA · Charlotte, NC, USA · McLean, VA, USA · Houston, TX, USA · Pittsburgh, PA, USA · Jersey City, NJ, USA · Colorado Springs, CO, USA · Cincinnati, OH, USA · Cleveland, OH, USA · Columbus, OH, USA · Baltimore, MD, USA · Nashville, TN, USA · Las Vegas, NV, USA · Tampa, FL, USA · Detroit, MI, USA · Miami, FL, USA · Costa Mesa, CA, USA · Minneapolis, MN, USA · Wichita, KS, USA · San Diego, CA, USA · San Antonio, TX, USA · Hartford, CT, USA · Grand Rapids, MI, USA · Jacksonville, FL, USA · Fort Worth, TX, USA · Stamford, CT, USA · Sacramento, CA, USA · Tallahassee, FL, USA · Philadelphia, PA, USA · Richmond, VA, USA · Memphis, TN, USA · Los Angeles, CA, USA · Indianapolis, IN, USA · New York, NY, USA · Boston, MA, USA · Denver, CO, USA · Chicago, IL, USA · Seattle, WA, USA · Dallas, TX, USA · jericho, ny, usa · Atlanta, GA, USA · Raleigh, NC, USA

Posted on Aug 1, 2026

Position Summary

Deloitte’s Cyber team helps clients address evolving cybersecurity challenges and opportunities by delivering solutions and managed services that reduce complexity, strengthen resilience, and support confident growth. As a Google SecOps Manager supporting Google SecOps engagements, you will contribute to high-visibility projects by applying advanced SOC engineering experience and knowledge of Google SecOps, threat detection engineering, SIEM, SOAR, and automation development. You will design, implement, and optimize secure, outcome-focused solutions while collaborating across teams to deliver reliable and efficient security operations capabilities. In this role, you will also mentor practitioners and help advance modern Google SecOps methods across the team.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As a Google SecOps Manager on the Cyber Defense & Resilience team, you will be responsible for:

  • Leading the design and implementation of secure, scalable Google SecOps architectures, including SIEM and SOAR capabilities aligned to client security requirements and regulatory obligations such as General Data Protection Regulation (GDPR) and Payment Card Industry Data Security Standard (PCI DSS)
  • Leading end-to-end deployment of log ingestion pipelines using data fabric technologies and integrations such as Bindplane, Cloud Feeds, and application programming interfaces (APIs)
  • Collaborating with security operations center (SOC) analysts and threat detection engineers to prioritize, develop, tune, and maintain threat detection rules in Google SecOps to identify malicious behavior across enterprise environments
  • Translating SOC processes into SOAR automation playbooks to reduce alert fatigue and scale alert triage and response
  • Developing and managing integrations across third-party platforms, security tools, and Google SecOps to support automated data ingestion, alert enrichment, response actions, and case management workflows
  • Leading and mentoring junior team members in SOC engineering, including SIEM, SOAR, and process development

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Our Cyber Defense & Resilience offering helps organizations defend against advanced threats by transforming security operations, monitoring technologies, data analytics, and threat intelligence capabilities. The team supports clients in managing and protecting dynamic attack surfaces while providing rapid crisis and cyber incident response. Through this work, we help clients strengthen readiness, response, and recovery across business disruptions.

Qualifications

Required:

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or another technical field, or equivalent work experience
  • 9+ years of experience in security operations, threat detection engineering, or enterprise information technology security
  • Experience with Google Cloud SecOps tool stack and architecture, including Google Chronicle SIEM, Google SecOps SOAR, Google Siemplify SOAR, threat detection engineering, and security operations center workflows
  • Experience with Python scripting and GoStash or Logstash for automation, integration development, log normalization, and parsing, as well as with extract, transform, load (ETL) pipelines and technologies such as Cribl, Bindplane, NXLog, Kafka, Cloud Feeds, and APIs
Deloitte is committed to providing reasonable accommodations for people with disabilities. If you require a reasonable accommodation to participate in the recruiting process, please direct your inquiries to the Global Call Center (GCC) at USTalentCICInbox@deloitte.com.
Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas, and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.
Our purpose
Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more.
Professional development

From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
As used in this posting, "Deloitte" means Deloitte & Touche LLP, a subsidiary of Deloitte LLP. Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Certain services may not be available to attest clients under the rules and regulations of public accounting.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.
Qualified applicants with criminal histories, including arrest or conviction records, will be considered for employment in accordance with the requirements of applicable state and local laws, including the Los Angeles County Fair Chance Ordinance for Employers, City of Los Angeles’s Fair Chance Initiative for Hiring Ordinance, San Francisco Fair Chance Ordinance, and the California Fair Chance Act. See notices of various fair chance hiring and ban-the-box laws where available. Fair Chance Hiring and Ban-the-Box Notices | Deloitte US Careers
Requisition code: 361386
Job ID 361386
See more open positions at Deloitte