Senior Google SecOps Engineer

About Persistent

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

Our disruptor's mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We reported $1,654.4M FY26 revenue with 17.4% Y-o-Y growth. We have delivered 24 sequential quarters of growth with $436.0M in Q4 FY26 revenue, up 3.2% Q-o-Q and 16.2% Y-o-Y growth. Our 27,500+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries.

About Position:

We are seeking a highly experienced Senior Google SecOps Engineer to lead and deliver Google Security Operations (SecOps) implementation, migration, detection engineering, parser development, and SOAR automation initiatives. The ideal candidate must have hands-on experience with Google SecOps SIEM and SOAR capabilities, successful execution of end-to-end migration projects, and expertise in YARA-L detection engineering. This role is critical for driving SIEM/SOAR modernization programs, enhancing security monitoring capabilities, and supporting enterprise Security Operations Centers (SOC).

• Role: Senior Google SecOps Engineer
• Location: All Persistent Locations
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Lead end-to-end migrations from legacy SIEM and SOAR platforms such as Splunk, QRadar, Microsoft Sentinel, ArcSight, LogRhythm, Exabeam, Cortex XSOAR, and Phantom to Google SecOps.
• Conduct discovery, assessment, planning, onboarding, implementation, testing, tuning, and migration validation activities.
• Design and implement scalable log ingestion architectures across cloud, network, endpoint, IAM, security, and application data sources.
• Develop custom parsers, parser extensions, UDM mappings, and telemetry normalization solutions.
• Design, develop, and optimize YARA-L detection rules to improve threat detection effectiveness.
• Convert detection content from SPL, KQL, AQL, Sigma, ArcSight rule formats, and other SIEM technologies into YARA-L.
• Build, migrate, and optimize SOAR playbooks, workflows, and security automation use cases.
• Integrate security tools and platforms using APIs for enrichment, triage, containment, remediation, and notifications.
• Support threat hunting, incident response investigations, forensic analysis, and SOC operations.
• Develop migration frameworks, onboarding standards, runbooks, validation plans, and operational documentation.
• Collaborate with security analysts, architects, engineers, and stakeholders to improve security monitoring capabilities.
• Perform detection tuning, alert optimization, and use-case enhancement activities.
• Assist organizations in strengthening threat detection, response, and security operations maturity.

Expertise You'll Bring:

• 8-12 years of experience in Cybersecurity, SIEM Engineering, SOAR Engineering, SOC Operations, Incident Response, or Detection Engineering.
• Minimum 1+ year of hands-on experience with Google SecOps implementations and operations.
• Proven experience delivering at least one full-cycle Google SecOps migration project.
• Strong expertise in Google SecOps SIEM and SOAR capabilities.
• Hands-on experience with log onboarding, parser development, parser extensions, UDM mapping, and telemetry normalization.
• Strong experience developing YARA-L detection content from scratch.
• Expertise in converting detection rules from Splunk SPL, Microsoft KQL, Sigma, QRadar AQL, ArcSight, and other SIEM technologies.
• Experience designing and implementing SOAR automation workflows and security orchestration use cases.
• Strong understanding of threat detection, threat hunting, SOC operations, and incident response processes.
• Experience integrating EDR, IAM, Cloud Security, Vulnerability Management, Email Security, and Security Operations platforms.
• Hands-on experience with REST APIs and third-party security tool integrations.
• Strong knowledge of cybersecurity frameworks, security monitoring practices, and enterprise security architecture.
• Experience performing security use-case development, alert tuning, and operational optimization.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent communication, documentation, and stakeholder management capabilities.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment.

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."