Assistant Manager - Cyber Security Operations

Larsen & Toubro; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Larsen & Toubro is seeking a senior security operations professional in Mumbai to drive incident response, threat hunting, and monitoring across SIEM/XDR platforms. You will design detections, tune alerts, and develop playbooks while coordinating with stakeholders.

Strong knowledge of MITRE ATT&CK, IOCs/IOAs, and industry frameworks is essential. Responsibilities include triage, investigations, containment, remediation, and post-incident reviews, leveraging SOAR and automation to improve

Qualifications

• Extensive hands-on experience with SIEM platforms, log analysis, and incident validation.
• Threat hunting, detection engineering, and threat intel-driven monitoring.
• Strong understanding of MITRE ATT&CK, IOCs/IOAs, and TTPs.
• Incident triage, investigation, root-cause analysis, containment, and remediation.
• SOAR, automation, playbooks, and security orchestration experience.
• Monitoring across endpoint, network, identity, cloud, email and apps; SIEM/XDR tuning.
• Familiar with NIST, CIS, and ISO 27001 frameworks; strong documentation and reporting.

Responsibilities

• Lead incident triage, investigation, containment, and post-incident reviews.
• Develop use-cases and detections; perform threat-hunting activities.
• Tune and optimize SIEM/XDR deployments; implement orchestration workflows.
• Produce security metrics, reports, and stakeholder-ready updates.

Skills

SIEM platforms

Log analysis

Event correlation

Alert investigation

Incident validation

Threat hunting

Detection engineering

Use-case development

Threat intelligence

MITRE ATT&CK

IOCs

IOAs

TTPs

Incident triage

Root cause analysis

Containment

Remediation

Post-incident review

SOAR platforms

Workflow automation

IR playbooks

Security orchestration

Endpoint monitoring

Network monitoring

Identity monitoring

Cloud monitoring

Email monitoring

Application monitoring

SIEM/XDR tuning

Documentation

Reporting

Stakeholder management

Problem-solving

NIST

CIS

ISO 27001

Tools

SIEM

SOAR

XDR

IR playbooks

Job description

• Strong hands-on experience with SIEM platforms, log analysis, event correlation, alert investigation, and incident validation.
• Experience in threat hunting, detection engineering, use-case development, and threat intelligence-driven security monitoring.
• Strong understanding of MITRE ATT&CK Framework, cyber-attack techniques, IOCs, IOAs, and adversary TTPs.
• Experience in incident triage, investigation, root cause analysis, containment, remediation, and post-incident review.
• Hands-on knowledge of SOAR platforms, workflow automation, incident response playbooks, and security orchestration.
• Good understanding of endpoint, network, identity, cloud, email, and application security monitoring, including SIEM/XDR tuning and optimization.
• Strong analytical, documentation, reporting, stakeholder management, and problem-solving skills, with knowledge of industry security frameworks such as NIST, CIS, and ISO 27001.