Senior Google SecOps Engineer

Persistent Systems; Pune District; Hybrid; INR 5,000,000 - 8,000,000; Full time

Benefits offered by this job

Hybrid work

Flexible hours

Long Service awards

Education sponsorship

Insurance coverage

Ergonomic office

Job summary

Persistent Systems is seeking a Senior Google SecOps Engineer to lead migration, detection engineering, and SOAR automation initiatives. You will design scalable log ingestion and parser solutions, and develop YARA-L rules to enhance threat detection across cloud, network, and endpoint sources.

The role requires 8–12 years in cybersecurity with hands-on Google SecOps experience and full-cycle migration delivery. Hybrid work model and enterprise SOC support are expected as part of the position.

Qualifications

• 8–12 years in Cybersecurity, SIEM/SOAR, SOC ops or detection engineering.
• Hands-on Google SecOps implementations and operations.
• Proven full-cycle migration experience for SIEM/SOAR platforms.

Responsibilities

• Lead migrations from legacy SIEM/SOAR to Google SecOps.
• Design scalable log ingestion across cloud, network, and apps.
• Develop parsers, UDM mappings, and telemetry normalization.
• Create YARA-L rules to improve threat detection.
• Build SOAR playbooks and automation workflows.
• Integrate tools via REST APIs for enrichment and containment.

Skills

Google SecOps

SIEM Engineering

SOAR Engineering

SOC Operations

Incident Response

YARA-L detection

Parser development

REST APIs

Threat hunting

Security automation

Tools

Splunk

QRadar

Microsoft Sentinel

ArcSight

LogRhythm

Exabeam

Cortex XSOAR

Phantom

Job description

We are seeking a highly experienced Senior Google SecOps Engineer to lead and deliver Google Security Operations (SecOps) implementation, migration, detection engineering, parser development, and SOAR automation initiatives. The ideal candidate must have hands-on experience with Google SecOps SIEM and SOAR capabilities, successful execution of end-to-end migration projects, and expertise in YARA-L detection engineering. This role is critical for driving SIEM/SOAR modernization programs, enhancing security monitoring capabilities, and supporting enterprise Security Operations Centers (SOC).

• Location: All Persistent Locations
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Lead end-to-end migrations from legacy SIEM and SOAR platforms such as Splunk, QRadar, Microsoft Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, and Phantom to Google SecOps.
• Conduct discovery, assessment, planning, onboarding, implementation, testing, tuning, and migration validation activities.
• Design and implement scalable log ingestion architectures across cloud, network, endpoint, IAM, security, and application data sources.
• Develop custom parsers, parser extensions, UDM mappings, and telemetry normalization solutions.
• Design, develop, and optimize YARA-L detection rules to improve threat detection effectiveness.
• Convert detection content from SPL, KQL, AQL, Sigma, ArcSight rule formats, and other SIEM technologies into YARA-L.
• Build, migrate, and optimize SOAR playbooks, workflows, and security automation use cases.
• Integrate security tools and platforms using APIs for enrichment, triage, containment, remediation, and notifications.
• Support threat hunting, incident response investigations, forensic analysis, and SOC operations.
• Develop migration frameworks, onboarding standards, runbooks, validation plans, and operational documentation.
• Collaborate with security analysts, architects, engineers, and stakeholders to improve security monitoring capabilities.
• Perform detection tuning, alert optimization, and use-case enhancement activities.
• Assist organizations in strengthening threat detection, response, and security operations maturity.

Expertise You'll Bring:

• 8-12 years of experience in Cybersecurity, SIEM Engineering, SOAR Engineering, SOC Operations, Incident Response, or Detection Engineering.
• Minimum 1+ year of hands-on experience with Google SecOps implementations and operations.
• Proven experience delivering at least one full-cycle Google SecOps migration project.
• Strong expertise in Google SecOps SIEM and SOAR capabilities.
• Hands-on experience with log onboarding, parser development, parser extensions, UDM mapping, and telemetry normalization.
• Strong experience developing YARA-L detection content from scratch.
• Expertise in converting detection rules from Splunk SPL, Microsoft KQL, Sigma, QRadar AQL, ArcSight, and other SIEM technologies.
• Experience designing and implementing SOAR automation workflows and security orchestration use cases.
• Strong understanding of threat detection, threat hunting, SOC operations, and incident response processes.
• Experience integrating EDR, IAM, Cloud Security, Vulnerability Management, Email Security, and Security Operations platforms.
• Hands-on experience with REST APIs and third-party security tool integrations.
• Strong knowledge of cybersecurity frameworks, security monitoring practices, and enterprise security architecture.
• Experience performing security use-case development, alert tuning, and operational optimization.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication, documentation, and stakeholder management capabilities.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.