Assistant Manager - Cybersecurity Operations

Tata Communications Limited; Pune District; Sur place; INR 1 800 000 - 2 400 000; Plein temps

Résumé du poste

Tata Communications Limited in Pune is seeking a Strategic SOC Leader to oversee security monitoring and incident response using LogRhythm SIEM. You will set policies, playbooks, and standards across a 24x7 operation for client and internal environments.

Lead escalation for high-severity incidents, manage SIEM architecture and correlation rules, and drive improvements to reduce false positives while ensuring compliance with SLAs and KPIs.

Qualifications

• Bachelor's degree in computer science, information technology or a related field.
• 5-8+ years of experience in Security Operations or SOC environments.
• Minimum of 3+ years hands-on experience with LogRhythm SIEM (preferred).
• Experience in MSS or multi-tenant SOC environments is highly preferred.

Responsabilités

• Provide strategic leadership and operational oversight for the SOC, ensuring effective security monitoring and incident response services.
• Establish, enforce, and improve SOC policies, procedures, playbooks, and standards.
• Ensure 24x7 security monitoring, detection, investigation, and response to incidents.
• Serve as primary escalation point for high-severity incidents, ensuring coordination and resolution.
• Oversee LogRhythm SIEM architecture, administration, tuning, upgrades, and platform health.
• Lead SIEM use-case development, correlation rule optimization, and reduction of false positives.
• Manage log source onboarding, data quality, retention, and regulatory compliance.
• Direct and manage the full incident response lifecycle, including post-incident reporting.
• Monitor SLAs, KPIs, internal controls, and customer contractual obligations.
• Prepare and deliver reports on SOC performance, incidents, and risk trends.
• Act as trusted security advisor to customers and internal stakeholders.

Connaissances

Security Operations

Incident Response

SIEM (LogRhythm)

Threat Detection

Log Management

Cloud Security

MITRE ATT&CK

SOAR Automation

Leadership

Policy & Procedures

Formation

Bachelor's degree in Computer Science/Information Technology

Outils

LogRhythm SIEM

Description du poste

Responsibilities & Duties:

• Provide strategic leadership and operational oversight for the Security Operations Center (SOC), ensuring effective delivery of security monitoring and incident response services using LogRhythm SIEM.
• Establish, enforce, and continuously improve SOC policies, procedures, playbooks, and operational standards in alignment with industry best practices.
• Ensure 24x7 security monitoring, timely detection, investigation, and response to security incidents across customer and internal environments.
• Serve as the primary escalation point for high-severity and complex security incidents, ensuring proper coordination, communication, and resolution.
• Oversee LogRhythm SIEM architecture, administration, tuning, upgrades, and overall platform health and performance.
• Lead SIEM use-case development, correlation rule optimization, and continuous reduction of false positives to enhance detection effectiveness.
• Manage log source onboarding, data quality, retention, and compliance with contractual and regulatory requirements.
• Direct and manage the full incident response lifecycle, including root cause analysis, lessons learned, and post-incident reporting.
• Monitor and ensure compliance with SLAs, KPIs, internal controls, and customer contractual obligations.
• Prepare and deliver operational, technical, and executive-level reports on SOC performance, incidents, and risk trends.
• Act as a trusted security advisor to customers and internal stakeholders, providing guidance on threat landscape and risk posture.

Qualifications

• Bachelor's degree in computer science, Information Technology, or a related field.
• 5-8+ years of experience in Security Operations or SOC environments.
• Minimum of 3+ years of hands-on experience with LogRhythm SIEM (preferred).
• Experience in Managed Security Services (MSS) or multi-tenant SOC environments is highly preferred.

Technical Skills:

• Strong hands-on experience with LogRhythm SIEM (preferred), including administration and operations.
• Solid understanding of security monitoring, incident handling, and threat detection.
• Experience with log management, network security, endpoint security, and cloud environments.
• Knowledge of MITRE ATT&CK framework and threat intelligence concepts.
• Understanding on SOAR automation for reducing manual efforts.