Senior Google SecOps Engineer

About Position:

We are seeking a highly experienced Senior Google SecOps Engineer with hands-on expertise in Google Security Operations implementation, migration, detection engineering, parser development, and SOAR automation. The ideal candidate must have completed at least one full-cycle Google SecOps migration and possess strong expertise in SIEM/SOAR modernization initiatives.

• Role: Senior Google SecOps Engineer 
• Location: All Persistent Locations
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Deliver end-to-end migrations from Splunk, QRadar, Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, Phantom, and similar platforms to Google SecOps.
• Execute discovery, assessment, onboarding, detection migration, SOAR migration, testing, tuning, documentation, and handover activities.
• Design and implement scalable log ingestion pipelines across cloud, network, endpoint, IAM, security, and application data sources.
• Develop custom parsers, parser extensions, UDM mappings, and telemetry normalization solutions.
• Design, develop, tune, and maintain YARA-L detection rules.
• Convert detection logic from SPL, KQL, AQL, Sigma, ArcSight rules, and other SIEM formats into YARA-L.
• Build and migrate SOAR playbooks, workflows, and automation use cases.
• Integrate security tools through APIs for enrichment, triage, containment, remediation, and notification.
• Support threat hunting, incident response, forensic investigations, and SOC operations.
• Develop migration runbooks, operational documentation, validation plans, and onboarding frameworks.

Expertise You'll Bring:

• 8+ years of cybersecurity, SIEM, SOAR, SOC Engineering, Incident Response, or Security Operations experience.
• Minimum 1+ year hands-on Google SecOps experience.
• At least one completed full-cycle Google SecOps migration project.
• Strong hands-on experience with Google SecOps SIEM and SOAR capabilities.
• Expertise in log onboarding, parser development, parser extensions, UDM mapping, and normalization.
• Strong experience writing YARA-L detections from scratch.
• Experience converting detection content from SPL, KQL, Sigma, AQL, and other rule languages.
• Experience building and migrating SOAR playbooks and automation workflows.
• Strong knowledge of threat hunting, threat detection, incident response, and SOC operations.
• Experience integrating EDR, IAM, Cloud Security, Vulnerability Management, and Security Platforms.
• Hands-on API integration experience with security tools and enterprise applications.
• Preferred Education B.Tech / M.Tech / BCA / MCA

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."