Minimum qualifications: deep expertise in google sec ops, including the unified siem and soar platform (formerly chronicle). Proficiency in writing yara-l rules and a thorough understanding of the unified data model (udm) for log normalization. Hands-on experience with security automation, orchestration, and integrating third-party tools via apis. Preferred qualifications: google cloud professional security engineer certification.