Senior Google SecOps Engineer

Persistent; Pune District; Hybrid; INR 1,800,000 - 2,600,000; Full time

Benefits offered by this job

Competitive salary

Career development & certifications

Flexible work hours

Annual health check-ups

Insurance coverage: life, accident, MP

Job summary

Persistent is seeking a Senior Google SecOps Engineer to lead end-to-end migrations from multiple SIEM platforms to Google SecOps. You will design scalable log ingestion pipelines across cloud, network, IAM and application data sources, and develop parsers, UDM mappings and telemetry normalization.

You will also craft YARA-L detections, convert detection content from SPL/KQL/Sigma/AQL, and migrate SOAR playbooks and automation workflows while integrating tools via APIs.

Qualifications

• 8+ years in cybersecurity, SIEM, SOAR, SOC engineering or similar.
• At least 1 year hands-on Google SecOps experience.
• At least one completed full-cycle Google SecOps migration.
• Strong hands-on with Google SecOps SIEM and SOAR capabilities.
• Experience mapping/detecting content across SPL, KQL, Sigma, AQL and other rule formats.
• Experience building/migrating SOAR playbooks and automation workflows.
• API integration experience with security tools and enterprise apps.

Responsibilities

• Lead end-to-end migrations from legacy platforms to Google SecOps.
• Design scalable log ingestion pipelines across cloud, network, IAM and apps.
• Develop parsers, UDM mappings and telemetry normalization.
• Create and tune YARA-L detections and convert rules to YARA-L.
• Build and migrate SOAR playbooks and automation workflows.
• Integrate tools via APIs for enrichment, triage and containment.
• Support threat hunting, incident response and SOC operations.

Skills

Analytical thinking

Threat hunting

Incident response

SOC operations

Education

B.Tech / M.Tech / BCA / MCA

Tools

Splunk

QRadar

Sentinel

ArcSight

LogRhythm

Exabeam

Cortex XSOAR

Phantom

YARA-L

SPL

KQL

Sigma

AQL

UDM mappings

Job description

AboutPosition:

We are seeking a highly experienced Senior Google SecOps Engineer with hands-on expertise in Google Security Operations implementation, migration, detection engineering, parser development, and SOAR automation. The ideal candidate must have completed at least one full-cycle Google SecOps migration and possess strong expertise in SIEM/SOAR modernization initiatives.

• Role: Senior Google SecOps Engineer
• Location: All Persistent Locations
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

WhatYou'llDo:

• Deliver end-to-end migrations from Splunk, QRadar, Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, Phantom, and similar platforms to Google SecOps.
• Execute discovery, assessment, onboarding, detection migration, SOAR migration, testing, tuning, documentation, and handover activities.
• Design and implement scalable log ingestion pipelines across cloud, network, endpoint, IAM, security, and application data sources.
• Develop custom parsers, parser extensions, UDM mappings, and telemetry normalization solutions.
• Design, develop, tune, and maintain YARA-L detection rules.
• Convert detection logic from SPL, KQL, AQL, Sigma, ArcSight rules, and other SIEM formats into YARA-L.
• Build and migrate SOAR playbooks, workflows, and automation use cases.
• Integrate security tools through APIs for enrichment, triage, containment, remediation, and notification.
• Support threat hunting, incident response, forensic investigations, and SOC operations.
• Develop migration runbooks, operational documentation, validation plans, and onboarding frameworks.

ExpertiseYou'llBring:

• 8+ years of cybersecurity, SIEM, SOAR, SOC Engineering, Incident Response, or Security Operations experience.
• Minimum 1+ year hands-on Google SecOps experience.
• At least one completed full-cycle Google SecOps migration project.
• Strong hands-on experience with Google SecOps SIEM and SOAR capabilities.
• Expertise in log onboarding, parser development, parser extensions, UDM mapping, and normalization.
• Strong experience writing YARA-L detections from scratch.
• Experience converting detection content from SPL, KQL, Sigma, AQL, and other rule languages.
• Experience building and migrating SOAR playbooks and automation workflows.
• Strong knowledge of threat hunting, threat detection, incident response, and SOC operations.
• Experience integrating EDR, IAM, Cloud Security, Vulnerability Management, and Security Platforms.
• Hands-on API integration experience with security tools and enterprise applications.
• Preferred Education B.Tech / M.Tech / BCA / MCA

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven,People-Centric&InclusiveWorkEnvironment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."