Assistant Manager - Cyber Security Operations

Larsen & Toubro; Mumbai; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Larsen & Toubro in Mumbai is seeking a seasoned security operations professional to lead SIEM operations, threat hunting, and SOC maturity initiatives. You will act as a technical SME for detections, correlations, and monitoring.

Responsibilities include investigating escalated incidents, performing root cause analysis, and supporting containment and remediation. You will collaborate with MSSP and internal teams to continuously improve security capabilities.

Qualifications

• Must have strong hands-on experience with SIEM platforms and incident validation.
• Experience in threat hunting, detection engineering and use-case development.
• Deep understanding of MITRE ATT&CK, IOCs/IOAs and adversary TTPs.
• Experience in incident triage, root cause analysis and post-incident reviews.
• Hands-on knowledge of SOAR platforms and security orchestration.

Responsibilities

• Act as the technical SME for SIEM operations and SOC maturity initiatives.
• Investigate escalated security incidents and support containment/remediation.
• Conduct proactive threat hunting and leverage threat intelligence.
• Develop, optimize and maintain SIEM detection use cases and dashboards.
• Ensure effectiveness of monitoring through tuning and validation.
• Coordinate with MSSP and internal teams for timely investigations and SLA adherence.
• Support SOC governance, reporting, automation, and drills.

Skills

SIEM platforms

Threat hunting

MITRE ATT&CK

Incident triage

Security monitoring

Detection engineering

Use-case development

Threat intelligence

Analytical skills

Documentation

Stakeholder management

Post-incident review

SOC governance

Tools

SOAR platforms

Workflow automation

Security orchestration

SIEM/XDR tuning

Job description

Skills Required

• 1 Strong hands-on experience with SIEM platforms, log analysis, event correlation, alert investigation, and incident validation.

Skills Required

• 1 Strong hands-on experience with SIEM platforms, log analysis, event correlation, alert investigation, and incident validation.
• 2 Experience in threat hunting, detection engineering, use-case development, and threat intelligence-driven security monitoring.
• 3 Strong understanding of MITRE ATT&CK Framework, cyber-attack techniques, IOCs, IOAs, and adversary TTPs.
• 4 Experience in incident triage, investigation, root cause analysis, containment, remediation, and post-incident review.
• 5 Hands-on knowledge of SOAR platforms, workflow automation, incident response playbooks, and security orchestration.
• 6 Good understanding of endpoint, network, identity, cloud, email, and application security monitoring, including SIEM/XDR tuning and optimization.
• 7 Strong analytical, documentation, reporting, stakeholder management, and problem-solving skills, with knowledge of industry security frameworks such as NIST, CIS, and ISO 27001.

Job Responsibilities

• 1 Act as the technical SME for SIEM operations, threat hunting, and SOC maturity enhancement initiatives.
• 2 Investigate escalated security incidents, perform root cause analysis, and support incident response, containment, and remediation activities.
• 3 Conduct proactive threat hunting and leverage threat intelligence to identify, analyze, and mitigate emerging cyber threats.
• 4 Develop, optimize, and maintain SIEM detection use cases, correlation rules, dashboards, reports, and monitoring coverage.
• 5 Ensure e?ectiveness of security monitoring through SIEM/XDR tuning, log source validation, visibility gap assessment, and detection improvement.
• 6 Coordinate with MSSP, Incident Response teams, and internal stakeholders to ensure timely investigations, escalation management, remediation, and SLA adherence.
• 7 Support SOC governance, reporting, automation initiatives, analyst mentoring, cyber drills, audits, and continuous improvement of security operations.