Lead and manage 24x7 SOC operations including incident response, threat hunting, threat intelligence, detection engineering, and SIEM/EDR/SOAR platform management. Drive process automation, compliance support, reporting, and team development to improve detection, response, and overall cyber defense posture.
The SOC Manager is responsible for leading and managing the organization's Security Operations Center (SOC), ensuring effective monitoring, detection, investigation, response, and remediation of cybersecurity threats. The role oversees Incident Response, Threat Hunting, Threat Intelligence, Threat Detection Engineering, and SOC operations while driving continuous improvement of security monitoring capabilities and cyber defense strategies.
Responsibilities1. Security Operations Management
Qualifications- Lead and manage 24x7 SOC operations and security monitoring activities.
- Develop and implement SOC processes, procedures, and operational metrics.
- Ensure timely triage, analysis, escalation, and resolution of security incidents.
- Drive operational excellence through process optimization and automation.
- Manage SOC analysts, incident responders, and threat hunters.
- Lead cyber incident response activities for security breaches, malware, ransomware, phishing, insider threats, and advanced persistent threats (APTs).
- Coordinate containment, eradication, recovery, and post-incident reviews.
- Develop and maintain Incident Response Plans, Playbooks, and Runbooks.
- Conduct root cause analysis and lessons learned exercises.
- Collaborate with legal, compliance, IT, and executive leadership during major incidents.
- Build and mature proactive threat hunting capabilities.
- Develop threat-hunting hypotheses based on intelligence and adversary tactics.
- Perform endpoint, network, cloud, and log-based threat hunting activities.
- Identify stealthy threats, attacker behaviors, and indicators of compromise (IOCs).
- Recommend detection improvements from hunting findings.
- Establish and manage Cyber Threat Intelligence (CTI) programs.
- Analyze emerging threats, adversary tactics, techniques, and procedures (TTPs).
- Integrate threat intelligence feeds into SOC operations and SIEM platforms.
- Produce actionable intelligence reports for technical and leadership teams.
- Track global threat actors, vulnerabilities, and industry-specific cyber risks.
- Design, implement, and continuously improve threat detection use cases.
- Develop SIEM detection rules, correlation searches, and analytics.
- Tune alerts to reduce false positives and improve detection effectiveness.
- Map detections to MITRE ATT&CK framework.
- Work with threat hunters and incident responders to enhance visibility and detection coverage.
- Manage SIEM, EDR, NDR, SOAR, and Threat Intelligence platforms.
- Ensure log onboarding, normalization, and retention requirements are met.
- Monitor cloud, endpoint, network, and application security events.
- Drive automation and orchestration initiatives to improve SOC efficiency.
- Support compliance frameworks such as ISO 27001, NIST CSF, PCI DSS, CIS Controls, SOC2, and GDPR.
- Report cybersecurity posture, KPIs, KRIs, and incident trends to senior management.
- Participate in audits, assessments, and regulatory reviews.
- Mentor and develop SOC analysts and cybersecurity professionals.
- Conduct performance reviews and training programs.
- Build career development and succession plans within the SOC team.
- Foster a culture of continuous learning and operational excellence.
- 8+ years of Cybersecurity experience.
- 3–5+ years of SOC leadership or managerial experience.
- Experience managing enterprise SOC environments and incident response engagements.
- Experience with cloud security monitoring and multi-cloud environments preferred.
- SIEM: Microsoft Sentinel, Splunk, QRadar, ArcSight, LogRhythm
- EDR/XDR: Microsoft Defender, CrowdStrike, SentinelOne, Carbon Black
- SOAR: Palo Alto XSOAR, Splunk SOAR, Microsoft Sentinel Automation
- Threat Intelligence Platforms (TIP)
Network Security, IDS/IPS, Firewall
Similar Jobs
Cloud • Information Technology • Security • Software • Cybersecurity
Provide technical expertise to enterprise customers, own the technical sales cycle, and deliver impactful sales presentations.
Top Skills:
Data ProtectionSaas-Based TechnologiesWeb-Related Technologies
Artificial Intelligence • Healthtech • Professional Services • Analytics • Consulting
Develop complex solutions using various technologies, manage projects through all lifecycle phases, and collaborate with teams to drive results. Emphasizes consulting mindset, client-first approach, and effective communication skills.
Top Skills:
AWSAzureEtl TechnologiesGCPHadoopInformaticaPysparkSparkSQLSsisTalend
Big Data • Food • Hardware • Machine Learning • Retail • Automation • Manufacturing
Lead change management for S/4 HANA and o9 planning data governance workstreams (master data, business data, analytics). Develop and execute change strategies, stakeholder engagement, training and communications, measure adoption, coach leaders, and support Ataccama deployment to embed data governance and a data-driven culture across regions.
Top Skills:
AtaccamaMdmO9 PlanningSap S/4 Hana
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
