---
title: 'Sr. SOC Engineer (Google SecOps) at Zimperium'
canonical: 'https://feeny.ai/job/sr-soc-engineer-google-secops-zimperium-dallas-j69jdswe0pnj'
type: 'job'
last_seen: '2026-10-13'
---

# Sr. SOC Engineer (Google SecOps) at Zimperium

- **Company:** Zimperium
- **Location:** Dallas, TX
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-10-01
- **Last confirmed live:** 2026-10-13
- **Apply:** https://jobs.lever.co/zimperium/2238d8a6-2e27-45cb-9787-f93a21d73283

## Job description

Zimperium® is the world leader in mobile security, purpose-built to protect the modern mobile enterprise. Trusted by leading organizations and governments, our AI-driven platform delivers real-time, on-device protection for mobile applications and devices. We help organizations stay ahead with proactive defense against evolving threats—including mobile-targeted phishing (mishing), malware, app vulnerabilities, and zero-day exploits. Our mission is to empower organizations to operate securely and confidently in today’s dynamic digital environment. We are looking for a Sr. SOC Engineer to own and operate our Google SecOps platform end-to-end. You will architect log ingestion, author threat detection rules, design agentic AI-powered triage and response automation, integrate our CNAPP platform with security operations workflows, and lead investigative response to high-severity incidents. This is a hands-on engineering role: you will execute the work yourself, not manage others' execution. You will own the detection strategy, platform architecture, automation design, and incident response quality. You will be the person your team calls when a new log source needs to be ingested and routed, when detection rules aren't firing, or when a complex incident demands technical leadership. You will own the outcomes and drive how the SOC operates. You will work in close collaboration with our DevOps, Cloud Security, and Product Security teams. You are expected to operate independently, make architectural decisions, and have the judgment to act without direction. Your technical and strategic decisions will drive Zimperium's security posture directly. Location: Dallas, TX preferred Key Responsibilities: 8+ years in security operations, threat detection, or incident response, with at least 4 years in a SIEM/SOC engineering or detection engineering role. Deep hands-on experience with at least one major SIEM platform (Splunk, ELK, Chronicle/Google SecOps, Sentinel, Sumo Logic). Production experience with detection authoring and tuning. Strong understanding of log types and sources—OS logs, application logs, network flow, DNS, proxy, endpoint telemetry, CNAPP/runtime security events. Ability to interpret and normalize heterogeneous data. Experience building or tuning threat detection rules and correlation logic. Working knowledge of attack frameworks (MITRE ATT&CK) and how to operationalize them. Proficiency in at least one scripting/programming language (Python, Go, Bash) sufficient to build and maintain automation, not just modify examples. Experience integrating security tools—APIs, webhooks, orchestration platforms (Zapier, Make, native SOAR). Comfortable debugging API calls and data flow. Hands-on incident investigation experience—evidence collection, root cause analysis, timeline reconstruction, scope determination. Familiarity with mobile threat detection, CNAPP, or endpoint threat detection. Understanding of how mobile/app security signals differ from infrastructure security. Strong written and verbal communication—ability to explain technical findings to non-technical stakeholders and brief executives on incidents and trends. Proven ability to operate independently, take ownership, and make decisions with sound judgment to non-technical stakeholders and brief executives on incidents and trends. Proven ability to operate independently, take ownership, and make decisions with sound judgment. Strong written and verbal communication—ability to explain technical findings to non-technical stakeholders and brief executives on incidents and trends. Required Qualifications: CNAPP & SecOps Integration. Orchestrate data flow from Zimperium's CNAPP platform into Google SecOps and other security tools. Build and own integrations to coordinate threat notifications, ensure consistent severity assignment, and enable unified response across mobile and cloud/infrastructure security. Google SecOps Platform Engineering. Own and maintain Google SecOps as the operational hub—SOAR workflows, alert routing logic, case management, automation rules, integrations with ticketing systems (Jira), notification channels, and escalation procedures. You make architectural decisions on how alerts flow through the system and how the team works. Investigative Leadership. Lead investigations into high-severity and complex incidents. Conduct root cause analysis, determine scope and impact, coordinate containment and remediation, and produce clear post-incident reports. You own the investigative strategy and mentor junior analysts on tradecraft. SOC Automation & Tooling. Write or adapt tools and scripts (Python, Go, Bash) to automate SOC workflows—bulk event analysis, data enrichment, response actions, reporting. Integrate third-party tools and APIs into Google SecOps workflows. You own the efficiency and scale of the SOC's technical operations. Metrics & Reporting. Define, instrument, and own SOC KPIs—detection latency, mean time to respond (MTTR), investigation duration, false positive rate, automation coverage. Build dashboards and reports for leadership. You are accountable for continuous improvement in SOC performance. On-Call & Incident Response. Serve as incident commander or key investigator for high-priority events. Drive incidents to root cause, not just closure. You own the incident response quality. Compliance & Audit Support. Generate evidence and documentation for security audits (ISO 27001, FedRAMP). Translate technical findings into auditor-readable format. Preferred Qualifications: Prior experience with Google Chronicle, Google SecOps, or similar cloud-native SIEM platforms. Experience with AI/ML-based alert triage, anomaly detection, or automated incident response. Experience operating in regulated or compliance-heavy environments—FedRAMP, DoD, PCI-DSS, HIPAA. Hands-on experience with mobile threat detection, mobile app security, or container/Kubernetes runtime security. Experience with threat modeling, vulnerability disclosure coordination, or security research. Relevant certifications (GCIH, ECIH, OSINT, GIAC certifications, or vendor-specific: Google Cloud Security, AWS Security, etc.). Prior DevSecOps, security engineering, or cloud security experience. A background in building systems shows a level of thinking we value.

Zimperium is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.

## About Zimperium

## Company Overview
- **One-liner**: Zimperium is the global leader in AI-empowered mobile security, providing on-device threat detection and application protection for enterprises and government organizations.
- **Entity Type**: Private (acquired by Liberty Strategic Capital in March 2022 for ~$525M, previously venture-backed)
- **Headquarters**: Dallas, Texas, USA
- **Founded**: 2010
- **Founders**: Itzhak Avraham, Elia Yehuda

## Core Business
- **Primary industry**: Mobile security / cybersecurity
- **Target customers**: Enterprise, government, and public sector organizations (B2B, FedRAMP authorized)
- **Mission statement**: Secure the power of mobile for organizations around the globe, using AI to counter mobile-first cyberattacks.

## Products & Services
- **zIPS (Mobile Threat Defense)**: On-device agent that detects malware, phishing (mishing), device compromise, and zero-day attacks without cloud dependency.
- **Mobile Application Protection Suite (MAPS)**:
  - **zScan**: Scans mobile apps for compliance, privacy, and security issues during development.
  - **zKeyBox**: Protects secrets and cryptographic keys from extraction.
  - **zShield**: Obfuscates and hardens source code, IP, and data against reverse engineering and tampering.
  - **zDefend**: SDK embedded in apps to detect device, network, phishing, and malware attacks in real time.

## Market Standing
- **Valuation / Market Cap**: Not disclosed as private; acquired for ~$525M in 2022.
- **Key Metrics**:
  - Annual Revenue: ~$39.4M (latest estimate)
  - Total Funding: ~$597M (including $525M acquisition)
  - Employees: ~224 (10.3% YoY growth), distributed across 24 countries
- **Notable Investors/Partners**: SoftBank, Warburg Pincus, Sierra Ventures, Titanium Ventures; parent company Liberty Strategic Capital.
- **Growth Signals**: First MTD provider to achieve FedRAMP ATO; acquired Mi3 Security (2018) and whiteCryption (2021); expanding remote workforce globally.

## Competitive Advantages
- **Only on-device AI mobile threat defense**: zIPS runs locally, detecting attacks without cloud latency or connectivity – a strong moat against zero-day threats.
- **Unified mobile app protection suite (MAPS)**: End-to-end security for mobile apps, from development to runtime.
- **Federal authorization**: FedRAMP certified, giving a clear edge in government and highly regulated sectors.
- **Long track record**: Founded in 2010, deep expertise in mobile security with multiple acquisitions.

## Strategic Focus
- **Expanding public sector business**: Growing FedRAMP footprint and hiring Customer Success Managers for public sector endpoint security.
- **AI-driven innovation**: Heavy investment in AI/machine learning for threat detection (open roles for AI Engineers and Detection Researchers).
- **Global remote workforce**: Hiring across US, India, Europe, and Asia-Pacific to scale customer support and engineering teams.
- **Continued product integration**: Enhancing MAPS and zIPS to address emerging mobile attack vectors (e.g., mishing, app tampering).

## Why Work Here
- **Culture**: Values-driven environment focused on “securing what matters, innovating fearlessly, and serving with integrity.”
- **Remote/Hybrid**: Hybrid at Dallas HQ; many roles fully remote across the US, Europe, India, and other regions.
- **Perks**: Generous parental leave, 401(K), healthcare, remote work program, and a commitment to inclusion and diversity.
- **Engineering**: High-impact work on cutting-edge mobile security, with opportunities in AI, Java, Python, DevOps, and cloud security.
- **Growth**: 10%+ YoY headcount growth; open roles in research, engineering, customer success, and marketing.

## Sources
1. [zimperium.com](https://zimperium.com/company)
2. [zimperium.com/careers](https://zimperium.com/company/careers)
3. [linkedin.com/company/zimperium](https://www.linkedin.com/company/zimperium)
4. [builtin.com/company/zimperium](https://builtin.com/company/zimperium)
5. [jobs.lever.co/zimperium](https://jobs.lever.co/zimperium)

## Other roles at Zimperium

- [Partner and Alliance Manager/Director, Americas Enterprise](https://feeny.ai/job/partner-and-alliance-manager-director-americas-enterprise-zimperium-united-we24zbwsrf13) — United States
- [Business Development Representative (SaaS & Cybersecurity) - Central or Northeast](https://feeny.ai/job/business-development-representative-saas-cybersecurity-central-or-northeast-1wspafbfe2m6) — United States
- [Site Reliability Engineer - Dallas, TX (Hybrid)](https://feeny.ai/job/site-reliability-engineer-dallas-tx-hybrid-zimperium-dallas-hs4q5c13h370) — Dallas, TX
- [Order Management and Deal Desk Sr Specialist](https://feeny.ai/job/order-management-and-deal-desk-sr-specialist-zimperium-dallas-dahcp0tr44n3) — Dallas, TX
- [Sr. Software Engineer (Java or Python) - Dallas, Texas Only (Hybrid)](https://feeny.ai/job/sr-software-engineer-java-or-python-dallas-texas-only-hybrid-zimperium-dallas-zb65x4zbk5m2) — Dallas, TX
- [Regional Account Manager - West Coast, Texas, and Northeast (Technical/Cybersecurity)](https://feeny.ai/job/regional-account-manager-west-coast-texas-and-northeast-technical-cybersecurity-4qqkbffvwbb0) — United States
- [Jr. QA Automation (API) - Bangalore, India](https://feeny.ai/job/jr-qa-automation-api-bangalore-india-zimperium-bengaluru-01gezp2h0qn8) — Bengaluru, India
- [Technical Product Support Engineer - Endpoint/MTD (Device) & Cybersecurity](https://feeny.ai/job/technical-product-support-engineer-endpoint-mtd-device-cybersecurity-zimperium-kra4cj7h21sk) — India
- [Python Developer - Bangalore, India](https://feeny.ai/job/python-developer-bangalore-india-zimperium-bengaluru-4z6zgra8b230) — Bengaluru, India
- [Java Engineer (Back-End & Microservices) - Bangalore, India](https://feeny.ai/job/java-engineer-back-end-microservices-bangalore-india-zimperium-bengaluru-0ybrt1e26bk5) — Bengaluru, India