Senior Google SecOps Engineer

Persistent Systems; Pune District; Hybrid; INR 2,800,000 - 4,200,000; Full time

Benefits offered by this job

Group term life insurance

Personal accident insurance

Mediclaim hospitalization

Long Service awards

Flexible work hours

Job summary

Persistent Systems is seeking a highly experienced Senior Google SecOps Engineer to lead migration and implementation of Google SecOps across environments, with SIEM/SOAR modernization and detection engineering expertise. The role demands hands-on migration, parser development, and YARA-L rule creation.

You will design scalable log ingestion pipelines, build SOAR playbooks, integrate tools via APIs, and support threat hunting, incident response, and SOC operations across all Persistent locations

Qualifications

• 8+ years in cybersecurity, SIEM/SOAR, or SOC operations.
• Minimum 1+ year hands-on Google SecOps experience.
• At least one completed full-cycle Google SecOps migration.
• Strong expertise with Google SecOps SIEM and SOAR capabilities.

Responsibilities

• Lead end-to-end migrations from legacy platforms to Google SecOps.
• Onboard, migrate detection, SOAR, and playbooks; test and hand over.
• Design scalable log ingestion pipelines across cloud, network, endpoint, IAM, and apps.
• Develop parsers, UDM mappings, and telemetry normalization solutions.
• Create YARA-L rules; convert detection content from other rule languages.
• Integrate security tools via APIs for enrichment, triage, containment, and remediation.
• Support threat hunting, incident response, and forensic investigations.
• Develop migration runbooks, validation plans, and onboarding frameworks.

Skills

Cybersecurity

SIEM

SOAR

SOC Engineering

Incident Response

Threat Hunting

Threat Detection

API integration

Tools

Splunk

QRadar

ArcSight

Cortex XSOAR

SIEM tools

YARA-L

Job description

We are seeking a highly experienced Senior Google SecOps Engineer with hands-on expertise in Google Security Operations implementation, migration, detection engineering, parser development, and SOAR automation. The ideal candidate must have completed at least one full-cycle Google SecOps migration and possess strong expertise in SIEM/SOAR modernization initiatives.

• Location: All Persistent Locations
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Deliver end-to-end migrations from Splunk, QRadar, Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, Phantom, and similar platforms to Google SecOps.
• Execute discovery, assessment, onboarding, detection migration, SOAR migration, testing, tuning, documentation, and handover activities.
• Design and implement scalable log ingestion pipelines across cloud, network, endpoint, IAM, security, and application data sources.
• Develop custom parsers, parser extensions, UDM mappings, and telemetry normalization solutions.
• Design, develop, tune, and maintain YARA-L detection rules.
• Convert detection logic from SPL, KQL, AQL, Sigma, ArcSight rules, and other SIEM formats into YARA-L.
• Build and migrate SOAR playbooks, workflows, and automation use cases.
• Integrate security tools through APIs for enrichment, triage, containment, remediation, and notification.
• Support threat hunting, incident response, forensic investigations, and SOC operations.
• Develop migration runbooks, operational documentation, validation plans, and onboarding frameworks.

Expertise You'll Bring:

• 8+ years of cybersecurity, SIEM, SOAR, SOC Engineering, Incident Response, or Security Operations experience.
• Minimum 1+ year hands-on Google SecOps experience.
• At least one completed full-cycle Google SecOps migration project.
• Strong hands-on experience with Google SecOps SIEM and SOAR capabilities.
• Expertise in log onboarding, parser development, parser extensions, UDM mapping, and normalization.
• Strong experience writing YARA-L detections from scratch.
• Experience converting detection content from SPL, KQL, Sigma, AQL, and other rule languages.
• Experience building and migrating SOAR playbooks and automation workflows.
• Strong knowledge of threat hunting, threat detection, incident response, and SOC operations.
• Experience integrating EDR, IAM, Cloud Security, Vulnerability Management, and Security Platforms.
• Hands-on API integration experience with security tools and enterprise applications.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."