AVP - Security Operations (SOC) - Global Information Security

About the role

The ideal candidate will have strong hands-on experience in cybersecurity operations, incident response, enterprise security monitoring, networking, cloud technologies, and security frameworks such as NIST and MITRE ATT&CK. This role requires an experienced security professional who can monitor, detect, investigate, and respond to security events across a global enterprise environment.

What you'll do

• Perform in-depth analysis of security alerts from multiple security platforms to determine scope, impact, severity, and root cause
• Manage and respond to cybersecurity incidents, ensuring timely escalation, containment, remediation support, and thorough documentation
• Utilize Endpoint Detection and Response tools such as CrowdStrike and Microsoft Defender to investigate endpoint-level threats and suspicious activities
• Leverage SIEM technologies, particularly Splunk, for security monitoring, log correlation, threat hunting, alert analysis, and detection rule development
• Investigate and respond to phishing, malicious emails, and other email-based security threats using email security solutions such as Proofpoint

What you need

• 6–11 years in cybersecurity
• Incident response
• Network security
• SIEM
• EDR
• Firewalls
• DLP
• B.Tech or B.E. or B.Sc or BCA

Good to have

• Splunk
• AWS
• Azure
• Penetration testing
• SOP writing
• Capital markets