Key responsibilities

- Own the Google SecOps operating model, architecture, roadmap, service quality, capacity, data-retention strategy, and integration governance.

- Lead complex and high-severity investigations, coordinate containment and recovery, and provide concise executive and customer communications.

- Design the detection engineering lifecycle, including threat modeling, YARA-L standards, peer review, testing, deployment, tuning, and retirement.

- Govern UDM normalization, data-source prioritization, parser quality, telemetry coverage, ingestion health, and cost or volume optimization.

- Architect SOAR workflows and integrations with EDR, identity, network, cloud, email, ITSM, threat intelligence, and vulnerability platforms.

- Map detection and response coverage to MITRE ATT&CK;, business risks, threat scenarios, control gaps, and regulatory obligations.

- Mentor L1/L2 analysts and engineers through case reviews, technical workshops, quality audits, simulations, and individual development plans.

- Define and report KPIs and KRIs, including MTTD, MTTR,



automation rate, false-positive rate, coverage, backlog, and platform availability.

- Support solutioning, effort estimation, transition, acceptance testing, audit responses, customer governance, and continuous-improvement planning.

Essential qualifications and expertise

- 7-11 years of cybersecurity experience with substantial ownership of a SIEM/SOAR service and at least 2 years in a lead or managerial capacity.

- Advanced Google SecOps expertise across architecture, UDM, YARA-L, SOAR, threat intelligence, data pipelines, integrations, and operational governance.

- Robust incident-command, stakeholder-management, technical-writing, mentoring, and problem-solving abilities.

- Experience designing enterprise detection coverage across endpoint, identity, network, SaaS, cloud, and business applications.

Preferred qualifications

- CISSP, CISM, Google Cloud security certification, or equivalent.

📌 Walk-in || Deloitte_Walk-In Drive_Cyber_Gurgaon_ Google Security Operations (Delhi)
🏢 Deloitte Shared Services India
📍 Delhi