SIEM Engineer - VOIS

We are seeking a SIEM Engineer specialising in Google SecOps log onboarding and integration to support the EU Markets Cyber Security function. This role focuses on onboarding security telemetry identified by EU cyber teams into the Google SecOps platform, ensuring reliable, high-quality data is available for security monitoring, threat detection, investigations, compliance and operational reporting. The successful candidate will play a key role in maintaining data quality, governance standards and operational effectiveness across security telemetry pipelines while collaborating with cyber, engineering and operational stakeholders.

Onboard, transform, validate and deliver security telemetry, log and event sources into Google SecOps using scalable and reusable ingestion patterns. Configure, support, troubleshoot and optimise data ingestion pipelines and associated tooling to maintain reliable and high-performing data flows. Implement and maintain data lineage, ownership tagging and metadata standards for onboarded data sources to support governance, compliance and regulatory requirements. Work closely with EU market cyber teams to gather onboarding requirements, understand source-system constraints and ensure successful integration outcomes. Validate end-to-end event flow and data quality across ingestion pipelines. Support parser maintenance, schema mapping and normalisation activities to ensure consistent and usable security telemetry. Identify and resolve issues relating to delayed, missing, duplicated or incorrectly parsed security events. Contribute to operational improvements through automation, documentation and standardised onboarding processes. Collaborate with security operations, engineering and platform teams to improve telemetry coverage and platform effectiveness.

Hands-on experience with Google SecOps. Strong understanding of security log sources, including firewall, proxy, EDR, IAM, operating system, cloud audit, application and network telemetry. Experience with log parsing, normalisation and schema mapping. Knowledge of syslog, agents, APIs, event hubs, collectors, forwarders and similar ingestion technologies. Scripting and automation experience using Python, PowerShell, Bash or similar technologies. Experience troubleshooting data ingestion pipelines and validating end-to-end event delivery. Strong analytical and problem-solving skills with the ability to diagnose data quality and ingestion challenges. Excellent stakeholder engagement and collaboration skills, with experience working across engineering, security and operational teams. Understanding of governance requirements relating to telemetry ownership, lineage and compliance controls.

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

Opportunity to work on a strategic Google SecOps platform supporting multiple European markets. Exposure to a broad range of security technologies, telemetry sources and cyber security use cases. Collaboration with international cyber security, engineering and operational teams. Opportunity to contribute to regulatory compliance initiatives, including security telemetry coverage and governance requirements. A role that combines technical delivery, problem-solving, automation and continuous improvement. Exposure to enterprise-scale security operations and security data management practices.

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background.

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this. We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together. With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Apply for Vodafone jobs only through the official Vodafone Careers website to avoid job scams and fraud. #JDEnhancedByTARA

LinkedIn: https://www.linkedin.com/company/vois/ Facebook: https://www.facebook.com/voisglobal Instagram: https://www.instagram.com/voisglobal/