Cyber - Google SecOps - Senior Consultant at Deloitte
Memphis, TN
$105,400–$207,800from the description
Aug 1, 2026
Memphis, TN
Sep 24, 2026
What this job asks for AI summary
A consulting role within Deloitte's Cyber Defense & Resilience practice, focused on designing and deploying Google SecOps (SIEM/SOAR) architectures for enterprise clients. Day-to-day work spans threat detection engineering, SOAR playbook development, log ingestion pipeline implementation, and case management — with roughly half the time spent traveling to client sites. Suits an experienced security operations practitioner comfortable leading workstreams and mentoring junior staff.
Senior level · 7+ years · Full-time
“or” means any one of them counts — you don't need all of them.
Posted 10 times — it's one opening, so apply once.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Aug 2, 2026. It is a model, not a headcount.
Why we read it this way (6)
The degree requirement lists 'Bachelor's degree … or equivalent work experience,' so no formal degree is hard-gated.
SOC classification is Medium confidence: the role is primarily security analysis/engineering (15-1212), but a meaningful portion of the work — SOAR playbook development, custom integrations, and pipeline building in Python — overlaps with software development (15-1252).
Bindplane and Cribl appear in both the required ETL/pipeline list and the preferred 'data fabric technologies' section; they are captured as required under the ETL requirement and also noted as preferred in their own right per the posting's structure.
The preferred certifications (Google Cloud Professional Cloud Architect, Google Cloud Professional Cloud Security Engineer, CCSP) are grouped as a single interchangeable preferred skill since the posting lists them as alternatives.
Threat hunting and cyber threat intelligence are listed as preferred but name no specific tool, so they are omitted from the skills list per extraction rules (no concrete named technology).
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Google Cloud Professional Cloud Architect.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.