KPMG India Logo

KPMG India

Manager - Consulting Implementation

Reposted 2 Months Ago
Be an Early Applicant
In-Office
Mumbai, Maharashtra, IND
Senior level
In-Office
Mumbai, Maharashtra, IND
Senior level
Lead and manage 24x7 SOC operations including incident response, threat hunting, threat intelligence, detection engineering, and SIEM/EDR/SOAR platform management. Drive process automation, compliance support, reporting, and team development to improve detection, response, and overall cyber defense posture.
The summary above was generated by AI
The SOC Manager is responsible for leading and managing the organization's Security Operations Center (SOC), ensuring effective monitoring, detection, investigation, response, and remediation of cybersecurity threats. The role oversees Incident Response, Threat Hunting, Threat Intelligence, Threat Detection Engineering, and SOC operations while driving continuous improvement of security monitoring capabilities and cyber defense strategies.
Responsibilities
1. Security Operations Management
  • Lead and manage 24x7 SOC operations and security monitoring activities.
  • Develop and implement SOC processes, procedures, and operational metrics.
  • Ensure timely triage, analysis, escalation, and resolution of security incidents.
  • Drive operational excellence through process optimization and automation.
  • Manage SOC analysts, incident responders, and threat hunters.
2. Incident Response
  • Lead cyber incident response activities for security breaches, malware, ransomware, phishing, insider threats, and advanced persistent threats (APTs).
  • Coordinate containment, eradication, recovery, and post-incident reviews.
  • Develop and maintain Incident Response Plans, Playbooks, and Runbooks.
  • Conduct root cause analysis and lessons learned exercises.
  • Collaborate with legal, compliance, IT, and executive leadership during major incidents.
3. Threat Hunting
  • Build and mature proactive threat hunting capabilities.
  • Develop threat-hunting hypotheses based on intelligence and adversary tactics.
  • Perform endpoint, network, cloud, and log-based threat hunting activities.
  • Identify stealthy threats, attacker behaviors, and indicators of compromise (IOCs).
  • Recommend detection improvements from hunting findings.
4. Threat Intelligence
  • Establish and manage Cyber Threat Intelligence (CTI) programs.
  • Analyze emerging threats, adversary tactics, techniques, and procedures (TTPs).
  • Integrate threat intelligence feeds into SOC operations and SIEM platforms.
  • Produce actionable intelligence reports for technical and leadership teams.
  • Track global threat actors, vulnerabilities, and industry-specific cyber risks.
5. Threat Detection Engineering
  • Design, implement, and continuously improve threat detection use cases.
  • Develop SIEM detection rules, correlation searches, and analytics.
  • Tune alerts to reduce false positives and improve detection effectiveness.
  • Map detections to MITRE ATT&CK framework.
  • Work with threat hunters and incident responders to enhance visibility and detection coverage.
6. Security Monitoring & SIEM Management
  • Manage SIEM, EDR, NDR, SOAR, and Threat Intelligence platforms.
  • Ensure log onboarding, normalization, and retention requirements are met.
  • Monitor cloud, endpoint, network, and application security events.
  • Drive automation and orchestration initiatives to improve SOC efficiency.
7. Risk, Compliance & Reporting
  • Support compliance frameworks such as ISO 27001, NIST CSF, PCI DSS, CIS Controls, SOC2, and GDPR.
  • Report cybersecurity posture, KPIs, KRIs, and incident trends to senior management.
  • Participate in audits, assessments, and regulatory reviews.
8. Team Leadership
  • Mentor and develop SOC analysts and cybersecurity professionals.
  • Conduct performance reviews and training programs.
  • Build career development and succession plans within the SOC team.
  • Foster a culture of continuous learning and operational excellence.
Qualifications
  • 8+ years of Cybersecurity experience.
  • 3–5+ years of SOC leadership or managerial experience.
  • Experience managing enterprise SOC environments and incident response engagements.
  • Experience with cloud security monitoring and multi-cloud environments preferred.
  • SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm
  • EDR/XDR: Microsoft Defender, CrowdStrike, SentinelOne, Carbon Black
  • SOAR: Palo Alto XSOAR, Splunk SOAR, Microsoft Sentinel Automation
  • Threat Intelligence Platforms (TIP)
  • Network Security, IDS/IPS, Firewall


Similar Jobs

An Hour Ago
In-Office
Mumbai, Maharashtra, IND
Senior level
Senior level
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
Develops and leads pricing strategies for hardware, software, and services in the telecom sector. Conducts benchmarking and trend analysis, manages pricing approvals, builds business cases, and advises on profitability, cash flow, terms, and commercial risks. Supports customer negotiations through price sheets, discounts, and incentive structures while collaborating with sales, commercial, domain, and global teams. The role also advances pricing analytics, automation, and digitalization initiatives.
Top Skills: Ai-RanCloudExcelTelecom
An Hour Ago
Easy Apply
Remote or Hybrid
Easy Apply
Senior level
Senior level
Artificial Intelligence • Cloud • Information Technology • Machine Learning • Software
Own Salesforce administration and the Revenue Operations technology stack while improving processes, data quality, reporting, vendor management, user adoption, and AI-enabled automation. Build dashboards and analyze pipeline, forecasting, renewals, and revenue performance. Lead cross-functional RevOps projects, manage implementations and integrations, document requirements and processes, and partner with Sales, Marketing, Customer Success, Finance, IT, and Procurement to drive scalable revenue growth.
Top Skills: AgentforceAi AutomationAsanaAzure DevopsConfluenceEinsteinHubspotJIRALeandataMarketoMonday.ComOutreachRevenue Operations TechnologySaas ApplicationsSalesforceSalesforce CpqZoominfo
An Hour Ago
Hybrid
Mumbai, Maharashtra, IND
Junior
Junior
Fintech • Software • Financial Services
Build and manage data connections, validate and normalize incoming portfolio files, automate monitoring and reporting, improve auto-reconciliation via data mining and transformations, support operations and development requests, and communicate technical solutions to non-technical stakeholders. Participate in light on-call duties.
Top Skills: APIsClearwaterFtpGroovyMS OfficePerlPythonRelational DatabasesSQL

What you need to know about the Mumbai Tech Scene

From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account