Security Operations Center Lead

About the role

This role will be responsible for day-to-day SOC operations, alert triage, incident escalation, use case development, playbook execution, threat monitoring, and operational reporting across enterprise IT, cloud, identity, endpoint, network, and application environments.

What you'll do

• Lead daily SOC operations across monitoring, alert triage, investigation, escalation, incident response coordination, and operational handoff across global time zones
• Own and mature SOC operating procedures, including incident intake, severity classification, escalation paths, response playbooks, major incident communications
• Manage and improve security monitoring across SIEM, SOAR, EDR/XDR, email security, cloud security, identity security, vulnerability signals, network telemetry
• Build, tune, and continuously improve detection use cases aligned to enterprise risks, MITRE ATT&CK techniques, threat intelligence, audit findings
• Partner with security engineering teams to improve log onboarding, data quality, telemetry coverage, alert fidelity, automation, and response integrations

What you need

• 5–9 yrs of experience
• Incident response
• SIEM
• Network security
• Cloud security
• EDR
• ISO 27001
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CEH
• AWS
• GCP
• IPR
• LLMs
• Azure