Senior Google SecOps Engineer

Persistent Systems Limited; Pune District; Hybrid; INR 3,800,000 - 6,500,000; Full time

Benefits offered by this job

Hybrid work model

Long Service awards

Training & certifications

Job summary

Persistent Systems Limited is seeking a Senior Google SecOps Engineer to lead end-to-end migrations, detection engineering, and SOAR automation across enterprise environments. You will design scalable log ingestion, develop parsers, and convert rules from multiple SIEMs to Google SecOps, while collaborating with analysts and stakeholders.

The role requires 8–12 years in cybersecurity with hands-on Google SecOps experience, and offers hybrid work with a diverse, inclusive culture and

Qualifications

• 8-12 years of cybersecurity and SIEM/SOAR experience.
• Minimum 1+ year of hands-on Google SecOps implementations.
• Experience delivering at least one full-cycle Google SecOps migration.
• Strong expertise in Google SecOps SIEM and SOAR capabilities.
• Hands-on experience with log onboarding, parser development, UDM mapping, telemetry normalization.
• Strong experience developing YARA-L detection content from scratch.
• Expertise in converting detection rules from multiple SIEMs.

Responsibilities

• Lead end-to-end migrations from legacy SIEM/SOAR to Google SecOps.
• Design scalable log ingestion architectures across cloud, network, endpoint, and IAM sources.
• Develop parsers, UDM mappings, and telemetry normalization solutions.
• Design, develop, and optimize YARA-L detection rules.
• Build, migrate, and optimize SOAR playbooks and automation.
• Integrate security tools and platforms via APIs for enrichment and containment.
• Support threat hunting, incident response investigations, and SOC operations.
• Develop migration frameworks, runbooks, and operational docs.
• Collaborate with analysts, architects, and engineers to enhance monitoring.
• Tune detections and alerts for improved security posture.

Skills

Google SecOps

SIEM engineering

SOAR engineering

SOC operations

Incident response

Tools

Splunk

QRadar

Microsoft Sentinel

ArcSight

LogRhythm

Exabeam

Cortex XSOAR

Phantom

Job description

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

Our disruptor's mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We reported $1,654.4M FY26 revenue with 17.4% Y-o-Y growth. We have delivered 24 sequential quarters of growth with $436.0M in Q4 FY26 revenue, up 3.2% Q-o-Q and 16.2% Y-o-Y growth. Our 27,500+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries.

AboutPosition:

We are seeking a highly experienced Senior Google SecOps Engineer to lead and deliver Google Security Operations (SecOps) implementation, migration, detection engineering, parser development, and SOAR automation initiatives. The ideal candidate must have hands-on experience with Google SecOps SIEM and SOAR capabilities, successful execution of end-to-end migration projects, and expertise in YARA-L detection engineering. This role is critical for driving SIEM/SOAR modernization programs, enhancing security monitoring capabilities, and supporting enterprise Security Operations Centers (SOC).

• Location: All Persistent Locations
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

WhatYou'llDo:

• Lead end-to-end migrations from legacy SIEM and SOAR platforms such as Splunk, QRadar, Microsoft Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, and Phantom to Google SecOps.
• Conduct discovery, assessment, planning, onboarding, implementation, testing, tuning, and migration validation activities.
• Design and implement scalable log ingestion architectures across cloud, network, endpoint, IAM, security, and application data sources.
• Develop custom parsers, parser extensions, UDM mappings, and telemetry normalization solutions.
• Design, develop, and optimize YARA-L detection rules to improve threat detection effectiveness.
• Convert detection content from SPL, KQL, AQL, Sigma, ArcSight rule formats, and other SIEM technologies into YARA-L.
• Build, migrate, and optimize SOAR playbooks, workflows, and security automation use cases.
• Integrate security tools and platforms using APIs for enrichment, triage, containment, remediation, and notifications.
• Support threat hunting, incident response investigations, forensic analysis, and SOC operations.
• Develop migration frameworks, onboarding standards, runbooks, validation plans, and operational documentation.
• Collaborate with security analysts, architects, engineers, and stakeholders to improve security monitoring capabilities.
• Perform detection tuning, alert optimization, and use-case enhancement activities.
• Assist organizations in strengthening threat detection, response, and security operations maturity.

ExpertiseYou'llBring:

• 8-12 years of experience in Cybersecurity, SIEM Engineering, SOAR Engineering, SOC Operations, Incident Response, or Detection Engineering.
• Minimum 1+ year of hands-on experience with Google SecOps implementations and operations.
• Proven experience delivering at least one full-cycle Google SecOps migration project.
• Strong expertise in Google SecOps SIEM and SOAR capabilities.
• Hands-on experience with log onboarding, parser development, parser extensions, UDM mapping, and telemetry normalization.
• Strong experience developing YARA-L detection content from scratch.
• Expertise in converting detection rules from Splunk SPL, Microsoft KQL, Sigma, QRadar AQL, ArcSight, and other SIEM technologies.
• Experience designing and implementing SOAR automation workflows and security orchestration use cases.
• Strong understanding of threat detection, threat hunting, SOC operations, and incident response processes.
• Experience integrating EDR, IAM, Cloud Security, Vulnerability Management, Email Security, and Security Operations platforms.
• Hands-on experience with REST APIs and third-party security tool integrations.
• Strong knowledge of cybersecurity frameworks, security monitoring practices, and enterprise security architecture.
• Experience performing security use-case development, alert tuning, and operational optimization.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication, documentation, and stakeholder management capabilities.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."