The Senior SOC Engineer detects cyber threats, leads incident response, creates documentation, automates tasks, and mentors junior staff, ensuring security operations run efficiently.
Over the last 20 years, Ares’ success has been driven by our people and our culture. Today, our team is guided by our core values – Collaborative, Responsible, Entrepreneurial, Self-Aware, Trustworthy – and our purpose to be a catalyst for shared prosperity and a better future. Through our recruitment, career development and employee-focused programming, we are committed to fostering a welcoming and inclusive work environment where high-performance talent of diverse backgrounds, experiences, and perspectives can build careers within this exciting and growing industry.
Step into a role where your expertise truly matters. As a Level 3 Incident Response Analyst, you’ll be part of a high-performing global SOC responsible for safeguarding a complex, large-scale financial environment. This is a hands-on, high-impact position for cybersecurity professionals in Mumbai who want to work on sophisticated threats, modern tooling, and global-level operations.
What makes this opportunity stand out:
This is more than a SOC role-it’s a chance to be part of a dynamic, expanding team that challenges itself, supports each other, and is committed to staying ahead of adversaries. If you want to elevate your career, work with world‑class cyber talent, and make a real impact in the financial sector, this opportunity is built for you.Primary functions and essential responsibilities
Job Description
Summary:Step into a role where your expertise truly matters. As a Level 3 Incident Response Analyst, you’ll be part of a high-performing global SOC responsible for safeguarding a complex, large-scale financial environment. This is a hands-on, high-impact position for cybersecurity professionals in Mumbai who want to work on sophisticated threats, modern tooling, and global-level operations.
What makes this opportunity stand out:
- Work directly with global teams across Security Operations, Engineering, Architecture, HR, and business leadership
- Lead deep‑dive investigations, advanced threat hunting, and coordinated incident response
- Operate across a modern security stack with strong investment in people, process, and technology
- Exposure to real-world financial‑sector threats and adversarial techniques
- A culture that values continuous learning, curiosity, and technical excellence
This is more than a SOC role-it’s a chance to be part of a dynamic, expanding team that challenges itself, supports each other, and is committed to staying ahead of adversaries. If you want to elevate your career, work with world‑class cyber talent, and make a real impact in the financial sector, this opportunity is built for you.Primary functions and essential responsibilities
- Detect and respond to cyber events, threats, and vulnerabilities
- Lead IR activities during the shift you are responsible for, ensuring timely and effective response
- Conduct IR exercises and postmortems with measurable outcomes
- Use SOAR to automate repetitive tasks and improve efficiency
- Provide timely updates to stakeholders and leadership
- Identify and document TTPs, IOCs, and artifacts
- Create queries and scripts to support investigations
- Maintain IR and forensic procedures and documentation
- Contribute to the incident response plan and post‑incident reporting
- Maintain and update SOC runbooks and playbooks
- Conduct threat hunting using intelligence and hypotheses
- Partner with engineering teams to optimize SOC operations
- Support continuous security control validation
- Participate in Purple/Blue team activities and campaign analysis
- Mentor junior analysts and support team development
- Deliver projects on time and meet stakeholder expectations
- Assist in developing SOC metrics and scorecards
- Drive adoption of AI-enabled detection and automation
- Apply an attacker mindset to strengthen detection and response
QUALIFICATIONS:
Education:
- Bachelor’s degree in Computer Science, Information Technology, or equivalent work experience
- Certifications such as GSEC, GCIA, CISSP, OSCP are a plus
Skills:
Excellent communication and influence skills
Strong understanding of offensive and defensive security
Ability to improve monitoring and response at scale
Strong analytical and decision‑making skills
Calm under pressure and tight deadlines
Proven mentoring ability
High integrity and trustworthiness
Ability to think like an attacker and anticipate adversary behavior
Comfort working in an environment adopting AI and automation
Experience Required:
- 6+ years in cybersecurity or security operations consulting
- Strong IR and forensic investigation experience
- Scripting experience (PowerShell or Python)
- Experience with SOAR preferred
- Experience with SIEM and EDR platforms
- Experience with cloud environments
- Experience mentoring or leading team members
- Experience with automation or AI‑assisted detection is a plus
General Requirements:
- Willingness to work primarily in SGT (Singapore Business Hours) and occasionally other shifts
- Ability to work onsite at the Ares Mumbai office
- Experience with SIEM, EDR, UEBA, and NBAD
- Understanding of attack methods and SIEM signatures
- Strong event analysis skills
- Knowledge of network protocols and log formats
- Understanding of cloud environments
- Strong analytical and problem-solving skills
- High personal integrity and professionalism
- Ability to work effectively across cultures and levels
- Adaptability to evolving environments
- Passion for cybersecurity and continuous learning
- Knowledge of security frameworks, attack methodologies, and intrusion detection
- Excellent verbal and written English communication skills
- Interest in leveraging AI, automation, and adversary-emulation techniques
Reporting Relationships
Vice President, CybersecurityThere is no set deadline to apply for this job opportunity. Applications will be accepted on an ongoing basis until the search is no longer active.
Top Skills
Edr
Powershell
Python
SIEM
Soar
Similar Jobs
Information Technology • Business Intelligence • Consulting
The Senior MS Engineer in SOC monitors networks for security issues, implements security measures, conducts vulnerability assessments, and contributes to compliance with security standards.
Top Skills:
AntivirusEncryptionFirewallsIntrusion Detection SystemsSIEMVulnerability Scanning Tools
Fintech • Information Technology • Financial Services
The Director of Application Engineering will guide a Shared Services team, improve engineering maturity, manage delivery outcomes, and mentor junior engineers while maintaining technical engagement.
Top Skills:
Java
Fintech • Professional Services • Consulting • Energy • Financial Services • Cybersecurity • Generative AI
As a .NET Full-Stack Developer, design and develop scalable applications, collaborate with teams, and implement best practices for performance and reliability.
Top Skills:
.NetAngularAWSAzureC#Ci/CdGCPJavaScriptMongoDBNoSQLPostgresReactRestful ApisSQLSQL ServerTypescript
What you need to know about the Mumbai Tech Scene
From haggling for the best price at Chor Bazaar to the bustle of Crawford Market, the energy of Mumbai's traditional markets is a key part of the city's charm. And while these markets will always have their place, the city also boasts a thriving e-commerce scene, ranking among the largest in the region. Driven by online sales in everything from snacks to licensed sports merchandise to children's apparel, the local industry is worth billions, with companies actively recruiting to meet the demands of continued growth.
