Location: Pune, India
Type: Full time
Experience: 10+ years
Travel: 10 to 15%, domestic and international

About AiStrike
Security teams drown in alerts, and real attacks hide among the false positives. AiStrike uses AI to prioritize and automate threat investigation and response. We cut alert volume from 100 to 5, give analysts the context to investigate what remains, and add workflow and automation to shorten response time.

The role
You will run delivery for complex SIEM migrations and integrations. That means cadence, schedule, stage gates and sign off. You have been hands on in SIEM implementations and know what decides whether a customer is ready to go live. You have onboarded data into a SIEM. Now you manage timelines, deliverables and executive stakeholders.

What you will do

Program governance

• Set the delivery cadence with the MSSP partner and AiStrike teams. Run the weekly operational forums.
• Keep decisions, actions and agreements in writing, with an owner and a due date on every open item.
• Own the stage gates and get recorded sign off at each one against the agreed regional milestones.
• Govern the migration lifecycle:
  • Stage 0: Prerequisites and tenant provisioning
  • Stage 1: Log source ingestion and parser validation
  • Stage 2: Content, detection rule and playbook migration
  • Stage 3: Parallel run and user acceptance testing
  • Stage 4: Cutover and legacy platform decommissioning
  • Stage 5: Stabilization and handover

Schedule, risk and dependencies

• Own the integrated schedule across customer migration waves, including dependencies between log onboarding, parsers, content migration and cutover windows.
• When a date slips, name the cause and the fix in the same week.
• Maintain the RAID log (risks, assumptions, issues, dependencies). Escalate only when a stage gate is genuinely at risk.
• Run a follow the sun model with the US TAM so partner leadership and the India delivery pods work from one plan.

Technical readiness

• Review SIEM, EDR/XDR, identity, cloud and email sources with the engineering pod. Confirm data is connected, normalized and arriving complete, then make the go live call.
• Diagnose blockers fast: missing credential, broken parser, timestamp or schema issue, detection gap, or an agent verdict the analyst does not trust. Say which one stops the gate.

Leadership and reporting

• Lead architects, data engineers, detection engineers and customer teams through influence. They do not report to you, and the schedule still moves.
• Turn technical status into a weekly health report and steering brief for delivery leadership and partners. Cover the success KPIs: alert volume, false positive rate, investigation time and share of alerts closed by the agent.
• Agree the operating model with the customer SOC: queues, escalation, ticketing and who accepts an agent verdict.
• Send Product and Engineering usable field evidence: customer, source, expected result, what the agent did and what the analyst did.

What you bring

• 10+ years in security service delivery /technical project/program management experience driving complex, multi-tenant enterprise software migrations, large-scale systems integrations, or IT transformations
• Hands on SIEM implementation experience, including log source onboarding, parsers and content migration, on a platform such as Securonix, Splunk, QRadar, Microsoft Sentinel, Google SecOps or Elastic.
• Current experience running programs across multiple customers at once, including timelines, deliverables, stage gates and stakeholder sign off.
• A track record of multi tenant or MSSP migrations, or large security platform rollouts, delivered to a committed date.
• Experience leading engineers and analysts in a matrix, without direct authority.
• Strong command of schedule and risk tools such as Jira, Confluence, Smartsheet or MS Project.
• Clear spoken and written English for analyst reviews and partner steering meetings.
• Comfort working across US and India hours, and willingness to travel 10 to 15%.

Nice to have

• Experience inside an MSSP, SOC or cybersecurity product company, taking customers live.
• Enough technical depth to read a failed integration or a SIEM query (SQL, KQL or SPL) and tell the pod what is wrong.
• SOAR playbook experience on Palo Alto XSOAR, Splunk SOAR, Tines or Torq.
• Experience judging AI or automation investigations: where the result is wrong and what the analyst should do next.
• A delivery certification such as PMP, PRINCE2 or an agile credential. Security certifications such as Security+, CISSP or CISM help, but do not replace SIEM implementation experience.

What we offer

• Ownership of a multi region MSSP migration, based in our Pune office, with global counterparts on the same program.
• A role in a high growth company building AI driven security operations.
• Competitive compensation.

‍