National AI Awards 2025Discover AI's trailblazers! Join us to celebrate innovation and nominate industry leaders.

Nominate & Attend

Google Chronicle Developer - Remote

London
2 weeks ago
Create job alert

FDM is a global business and technology consultancy seeking a Senior Google Chronicle Developer to work for our client within the health sector. This is initially a 6-month contract with the potential to extend and will be a fully remote role.

Our client is seeking a Senior Google Chronicle Developer, who will be instrumental in building, managing, and optimising their Chronicle-based security monitoring and threat detection ecosystem. You will work closely with Security Operations (SecOps), DevOps, and Data Engineering teams to ensure they have reliable data ingestion, robust detection logic, and automated response playbooks that surface actionable insights and drive rapid incident response.

Responsibilities

  • Design, develop, and maintain Chronicle detections and playbooks across IT, application, and security domains, using YARA-L, EQL, and Chronicle Policy Engine

  • Onboard new data sources into Chronicle via forwarders (e.g., Chronicle Data Forwarder, Fluentd/Fluent Bit), APIs, and custom parsers

  • Build and optimise UDM pipelines (parsers & normalization)—create custom parsing rules, JSON or regex-based Normalized Event configurations, and ensure new log sources conform to the common schema

  • Develop scheduled hunts and automated workflows in Chronicle for threat hunting (e.g., abnormal DNS tunneling, lateral movement). Leverage EQL for complex queries and scheduled scans

  • Collaborate with SecOps and DevOps to integrate Chronicle alerts with SOAR platforms (e.g., Phantom, Demisto), enabling automated enrichment (TI, asset data) and response actions. Author playbooks that, for example, isolate compromised endpoints, block IPs, or escalate to ticketing systems

  • Drive improvements in log standardization and detection rule hygiene—audit existing YARA-L rules, tune conditions to reduce false positives/negatives, and retire stale detections

  • Act as Chronicle SME for architecture reviews, capacity planning, licensing, and best practices and advise on Chronicle’s ingestion pipeline scaling (back-pressure, sharding), health monitoring, and performance metrics (ingest latency, query response times)

  • Participate in incident investigations and postmortems, providing insights via Chronicle query analysis and retrospectives. Identify detection gaps and propose new rule or playbook enhancements

  • Mentor junior Chronicle engineers and analysts—lead brown-bag sessions on writing EQL hunts, building YARA-L rules, or configuring UDM transformations

    Requirements

  • Minimum of 4+ years’ hands-on experience with Google Chronicle (or equivalent SIEM/SecOps) development and administration

  • Expertise in Chronicle detection languages: YARA-L (rule authoring, tuning), EQL-style queries, and Chronicle Policy Engine

  • Solid experience onboarding data via Chronicle Data Forwarder, Fluentd/Fluent Bit, syslog, and RESTful APIs. Comfortable building custom parsing pipelines and mapping to UDM

  • Deep understanding of Chronicle’s UDM schema—ability to create or extend Normalized Events, parse nested JSON, extract fields via JSONPath/regex

  • Proficiency integrating Chronicle with SOAR platforms (e.g., Phantom, Demisto) via webhooks or Cloud Pub/Sub. Able to automate threat-intel enrichment, host quarantines, and ticket creation

  • Hands-on with GCP services (Pub/Sub, Cloud Functions, BigQuery) and cloud-native logging (Stackdriver/Cloud Logging, AWS CloudWatch). Comfortable with containerized deployments (Kubernetes, Docker)

  • Strong foundation in security operations—familiarity with threat intelligence feeds, MITRE ATT&CK, and intrusion detection concepts. Able to translate raw logs into actionable detections

  • Experience using Git, CI/CD pipelines (e.g., Cloud Build, Jenkins) to manage Chronicle rule repositories, automated testing of YARA-L against staging data, and staged rollouts

    Why join us

  • Career coaching, mentoring and access to upskilling throughout your entire FDM career

  • Assignments with global companies and opportunities to work abroad

  • Opportunity to re-skill and up-skill into new areas, develop non-linear career paths and build a skillset within your field

  • Annual leave, work-place pension and BAYE share scheme

    About FDM

    We are a business and technology consultancy and one of the UK's leading employers, recruiting the brightest talent to become the innovators of tomorrow. We have centres across Europe, North America and Asia-Pacific, and a global workforce of over 3,500 Consultants. FDM has shown exponential growth throughout the years, firmly establishing itself as an award-winning employer and is listed on the FTSE4Good Index.

    Diversity and Inclusion

    FDM Group is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, national origin, age, disability, veteran status or any other status protected by federal, provincial or local laws

Related Jobs

View all jobs

Google Cloud Data Engineer

Data Visualisation Analyst

GCP Data Engineer

Senior Business Analyst - Microsoft 365

Digital Analytics

Data Engineer (4 day week)

National AI Awards 2025

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

How to Present Data Engineering Solutions to Non-Technical Audiences: A Public Speaking Guide for Job Seekers

As the demand for data engineers grows, so do the expectations. It’s not enough to build robust pipelines or optimise ETL jobs—UK employers now look for candidates who can also communicate clearly with stakeholders, especially those without technical backgrounds. Whether you're applying for a data engineering role in finance, healthcare, retail, or tech, your ability to explain complex systems in plain English is becoming one of the most valued soft skills in interviews and in the workplace. This guide will help you master public speaking for data engineering roles: from structuring your presentation and designing effective visuals, to simplifying terminology, storytelling and confidently answering stakeholder questions.

Data Engineering Jobs UK 2025: 50 Companies Hiring Now

Bookmark this guide—refreshed every quarter—so you always know who’s really expanding their data engineering teams. Driven by the UK’s Digital Economy Strategy, the AI & GenAI boom, cheaper cloud storage and a squeeze on legacy batch pipelines, data engineering hiring is in overdrive for 2025. Employers from hyperscale tech firms to NHS trusts want lake‑house architects, streaming‑platform specialists, ETL developers, MLOps pipeline gurus, analytics engineers & FinOps‑savvy cost guardians—right now. Below you’ll find 50 organisations that posted UK‑based data engineering vacancies or announced head‑count growth in the last eight weeks. They’re grouped into five easy‑scan categories. For each company you’ll see its main UK hub, an example live or recent vacancy, and a quick reason it’s worth your time. Search any employer on DataEngineeringJobs.co.uk to view current ads, or set a free alert so fresh openings land straight in your inbox.

Return-to-Work Pathways: Relaunch Your Data Engineering Career with Returnships, Flexible & Hybrid Roles

Re-entering the workforce after a career break can feel like stepping into a rapidly shifting data pipeline—especially in a specialist field like data engineering. Whether you paused your career for parenting, caring responsibilities or another life chapter, the UK’s data engineering sector now offers a variety of return-to-work pathways. From structured returnships to flexible, hybrid and full-time roles, these programmes recognise the value of your transferable skills and life experience. With tailored mentorship, targeted upskilling and supportive networks, you can confidently relaunch your data engineering career. In this guide, you’ll learn how to: Understand the current demand for data engineers in the UK Leverage your organisational, communication and problem-solving skills in data contexts Overcome common re-entry challenges with practical solutions Refresh your technical knowledge through targeted learning Access returnship and re-entry programmes tailored to data engineering Find roles that fit around family commitments—whether flexible, hybrid or full-time Balance your relaunch with caring responsibilities Master applications, interviews and networking specific to data engineering Draw inspiration from real returner success stories Get answers to common questions in our FAQ section Whether you aim to return as a data pipeline developer, ETL specialist, big-data architect or analytics engineer, this article maps out the steps and resources you need to reignite your data engineering career.