{"id":2796819,"url":"https://alion.io/job/persistent-systems-security-operations-sme-l3","title":"Security Operations SME (L3)","company":{"id":59479,"name":"Persistent Systems","domain":"persistent.com","url":"https://alion.io/company/persistent-systems","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zwayam","truth_index":{"grade":"B","score":75,"open_postings":17,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17000,"max_usd":37000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Bash","optional":false},{"name":"Carbon Black","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-05T05:17:17Z","employer_posted_date":"2026-10-17","last_verified_at":"2026-10-18T03:00:12Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"About Persistent\nWe are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.\nOur disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We reported $1,654.4M FY26 revenue with 17.4% Y-o-Y growth. We have delivered 24 sequential quarters of growth with $436.0M in Q4 FY26 revenue, up 3.2% Q-o-Q and 16.2% Y-o-Y growth. Our 27,500+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries. We have been recognized as the Fastest Growing IT Services Brand Globally in the 2026 Brand Finance IT Services 25 Report. We named a Leader in the Everest Group Private Equity (PE) Services PEAK Matrix® Assessment 2026 and Software Product Engineering PEAK Matrix® Assessment 2026.\nAbout Position:\nWe are seeking a highly skilled Security Operations SME (L3) to serve as the senior technical escalation point for complex and high-severity cyber incidents. This role plays a critical part in leading advanced investigations, incident response, proactive threat hunting, and continuous improvement of detection and monitoring capabilities within the Security Operations Center (SOC). The ideal candidate will collaborate closely with Incident Response, Threat Intelligence, Infrastructure, Endpoint, Network, Cloud, and Application teams to strengthen the organization's overall security posture.\n Role: Security Operations SME (L3)\nLocation: Mumbai\nExperience: 8 to 12 Years\nJob Type: Full-Time Employment\nWhat You'll Do:\nAct as the Level 3 escalation point for complex, high-severity, and multi-domain security incidents.\nLead deep-dive investigations to determine attack scope, root cause, affected assets, business impact, and attacker tactics, techniques, and procedures.\nDrive incident containment, eradication, recovery, post-incident reviews, and corrective-action tracking with relevant technical teams.\nConduct advanced analysis across SIEM events, endpoint telemetry, network traffic, identity activity, cloud logs, malware indicators, and threat intelligence sources.\nPerform proactive threat hunting and develop threat-hunting hypotheses aligned with MITRE ATT&CK and emerging threat patterns.\nDesign, tune, validate, and maintain correlation rules, detection use cases, alerts, dashboards, and investigation content.\nReduce false positives, identify detection gaps, and improve monitoring coverage using lessons learned from incidents and threat intelligence.\nDevelop and maintain incident response playbooks, SOPs, runbooks, escalation procedures, and knowledge articles.\nOptimize SIEM, EDR/XDR, SOAR, and related security tools while troubleshooting integration, monitoring, performance, and data quality issues.\nProvide technical guidance, mentoring, case reviews, and knowledge-sharing sessions for L1 and L2 analysts.\nPrepare incident reports, root-cause analyses, executive summaries, and technical recommendations.\nSupport audits, tabletop exercises, service reviews, operational metrics, and continuous improvement initiatives.\nParticipate in shift rotations and on-call support for critical security incidents as required.\nExpertise You'll Bring:\nExtensive experience in Security Operations Center (SOC) operations, incident response, security monitoring, and cyber investigations.\nAdvanced hands-on experience with SIEM platforms such as Splunk Enterprise Security, Microsoft Sentinel, IBM QRadar, or equivalent solutions.\nExperience with EDR/XDR technologies including Microsoft Defender for Endpoint, CrowdStrike Falcon, Carbon Black, or similar platforms.\nStrong log analysis expertise across endpoint, network, server, application, identity, and cloud data sources.\nDeep knowledge of threat hunting, IOC analysis, attack-chain reconstruction, malware triage, and digital forensic fundamentals.\nStrong understanding of MITRE ATT&CK, common cyberattack techniques, threat actor methodologies, and incident response lifecycle management.\nExperience developing, tuning, and optimizing SIEM correlation rules, threat detection content, searches, alerts, dashboards, and reports.\nExposure to SOAR platforms, automated workflows, orchestration playbooks, and security automation initiatives.\nWorking knowledge of Windows, Linux, TCP/IP, DNS, HTTP/S, Active Directory, Entra ID, authentication technologies, and cloud environments.\nScripting and automation experience using Python, PowerShell, Bash, or similar technologies.\nExcellent analytical, troubleshooting, documentation, stakeholder management, and communication skills.\nExperience working within enterprise SOC or Managed Security Service Provider (MSSP) environments.\nBachelor's degree in Computer Science, Cybersecurity, Information Security, or equivalent professional experience.\nRelevant certifications such as CISSP, GCIH, GCIA, GCFA, Splunk, Microsoft Security, CrowdStrike, or equivalent security certifications.\nExperience presenting incident findings and security recommendations to both technical and non-technical audiences.\nProven ability to manage high-severity incidents and drive effective incident response activities.\nStrong leadership and mentoring capabilities for guiding junior analysts and improving SOC maturity.\nAbility to collaborate effectively across multiple technical teams and business stakeholders.\nStrong focus on continuous improvement, detection engineering, threat intelligence integration, and operational excellence.\nCommitment to staying current with evolving cybersecurity threats, technologies, and industry best practices.\nBenefits:\nCompetitive salary and benefits package\nCulture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications\nOpportunity to work with cutting-edge technologies\nEmployee engagement initiatives such as project parties, flexible work hours, and Long Service awards\nAnnual health check-ups\nInsurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents\nValues-Driven, People-Centric & Inclusive Work Environment:\nPersistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.\nWe support hybrid work and flexible hours to fit diverse lifestyles.\nOur office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.\nIf you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment\nLet’s unleash your full potential at Persistent -persistent.com/careers\n“Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.”","description_format":"text","description_chars":7537,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Growth opportunities","Hybrid work","Insurance coverage"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Health Care","Information Technology","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-10-17T23:44:40Z"}],"visa":[],"liveness":{"score":73,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.806,"p_room":0.9,"age_days":12,"expected_fill_days":26,"reasons":["conf:1","win:mid","comp:brand"],"computed_at":"2026-10-18T04:29:25Z"},"pay":null,"html_url":"https://alion.io/job/persistent-systems-security-operations-sme-l3","json_url":"https://alion.io/job/persistent-systems-security-operations-sme-l3.json","meta":{"generated_at":"2026-10-18T04:29:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6692,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59479},"rest":"https://alion.io/mcp/rest/get_company?id=59479"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpersistent-systems-security-operations-sme-l3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpersistent-systems-security-operations-sme-l3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpersistent-systems-security-operations-sme-l3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/persistent-systems-security-operations-sme-l3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpersistent-systems-security-operations-sme-l3"}]}