SecOps Consultant

SecOps ConsultantLocation: Madrid, Community of Madrid, SpainCompany: KyndrylWho We AreAt Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, customers and communities.The RoleCybersecurity professional specialized in Google SecOps, with hands‑on experience across Google SecOps, including SIEM, SOAR automation, BigQuery‑based threat analytics, and Gemini‑powered security workflows. Skilled in designing, implementing, and operating end‑to‑end detection, investigation, and response capabilities in Google Cloud environments. Adept at leveraging Google’s AI‑driven security ecosystem to enhance threat visibility, accelerate incident resolution, and strengthen operational resilience across large‑scale, cloud‑native infrastructures.Who You Are3+ years in cybersecurity servicesSpanish and English (B2 level or higher)Advanced Technician Certificate in Multiplatform Application DevelopmentCertifications: Google SecOps – SOAR Developer, Google SecOps – SOAR AnalystFull‑time 8x5 schedule, hybrid (Madrid) full remoteKey ResponsibilitiesOperate and optimize Google SecOps platforms, ensuring high‑quality detection, response, and monitoring capabilitiesDesign and maintain custom detection logic using UDM, YARA‑L rulesets, and BigQuery analyticsLead incident investigation and response using Chronicle’s investigation workbench and Gemini‑driven workflowsBuild and automate SOAR playbooks for triage, containment, remediation, and enrichmentIntegrate diverse log sources into Google SecOps (GCP services, endpoints, SaaS applications, on‑prem systems)Conduct threat hunting using BigQuery, threat intelligence, and historical log datasetsCollaborate with SecOps, Cloud, and IT teams to ensure consistent security visibility across hybrid environmentsSupport forensics and root‑cause analysis by leveraging Google Cloud‑native telemetryDevelop dashboards, reports, and operational KPIs for security leadership and governanceTune detections, enrich signals, and refine playbooks to reduce false positives and accelerate responseAlign security operations with regulatory and compliance requirements relevant to the environmentDrive continuous improvement by evaluating new features in Chronicle, Gemini, and Google Cloud Security ServicesCore Required CompetenciesExpert understanding of Google SecOps (Chronicle SIEM, Chronicle SOAR, investigation workbench)Strong experience with BigQuery for threat detection, analytics, and custom security queriesKnowledge of Gemini for Security (AI‑assisted investigation, threat summarization, response acceleration)Understanding of Google Cloud security architecture, IAM, VPC, SCC (Security Command Center)Hands‑on experience creating detection rules, YARA‑L, IOCs, UDM‑based queriesFamiliarity with log ingestion pipelines (Dataflow, Pub/Sub, Log Router)Experience in SOAR playbook design, automation, and orchestration for incident responseKnowledge of MITRE ATT&CK, threat hunting methodologies, and incident lifecycle managementAbility to perform forensic analysis leveraging Google Cloud evidence sources (GCS, Cloud Logging, API logs)Skills in scripting (Python, SQL, bash) for automation and custom toolingExperience with threat intelligence enrichment, IOC management, and contextual analysisStrong communication and documentation skills for reporting, runbooks, and knowledge basesBeing YouDiversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. Our Kyndryl Inclusion Networks are just one of many ways we create a workplace where all Kyndryl employees can find and provide support and advice. This dedication to welcoming everyone means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.What You Can ExpectWith state‑of‑the‑art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well‑being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company‑wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non‑profit organizations. At Kyndryl, we invest heavily in you; we want you to succeed so that together, we will all succeed.Get ReferredIf you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact’s Kyndryl email address.Seniority LevelMid‑Senior levelEmployment typeFull‑timeJob functionConsulting, Information Technology, and SalesIndustriesIT Services and IT Consulting#J-18808-Ljbffr