What are the responsibilities and job description for the Security Architect GCP position at Xoriant?
Position Title: Security Architect / Implementation Engineer
Location: Sunnyvale, CA (Hybrid) or REMOTE (Need to work Pacific time)
Duration: 6 Months contract with possibility of extension
Role Summary:
We are seeking a highly skilled Security Architect / Security Implementation Engineer with expertise in designing, implementing, and integrating Google Cloud Security Command Center (SCC), Chronicle SIEM, and Cybereason XDR. The candidate will be responsible for architecting the end-to-end solution, implementing GCP native security controls, integrating third-party security tools, and producing detailed design and operational documentation.
Key Responsibilities:
- Design and architect cloud-native security controls in GCP aligned with security and compliance frameworks (CIS, ISO 27001, NIST, etc.).
- Implement Google Security Command Center (SCC) for threat detection, vulnerability management, and risk insights.
- Architect and configure Chronicle SIEM for log ingestion, correlation, and advanced threat analytics.
- Integrate Cybereason XDR with SCC, Chronicle, and other security tools to establish end-to-end threat detection and response workflows.
- Define use cases, rules, policies, and security playbooks to automate detection and response.
- Document the solution architecture, design decisions, configuration standards, and integration workflows.
- Conduct knowledge transfer sessions with security operations and support teams.
- Collaborate with GCP Cloud Platform teams, SOC teams, and compliance teams to align solutions with enterprise policies.
Required Skills & Experience:
- 8–12 years of overall IT security experience with at least 4–5 years in Google Cloud Security.
- Proven experience with Google Security Command Center (SCC), Chronicle SIEM, and XDR platforms (Cybereason preferred).
- Strong knowledge of GCP IAM, VPC Service Controls, Cloud Armor, DLP, Cloud Logging, Cloud Monitoring.
- Hands-on experience in integrating SIEM, XDR, and native GCP security tools.
- Experience with Terraform, Deployment Manager, or automation frameworks for security deployment.
- Strong documentation and presentation skills.
- Security certifications preferred: Google Professional Cloud Security Engineer, GCP Professional Architect, CISSP, CISM, CCSP.