Assistant Manager - IT Security Operations

SG Analytics; Chennai; Hybrid; INR 1,200,000 - 2,300,000; Full time

Job summary

SG Analytics is seeking an experienced security operations leader to manage L1–L3 SOC activities in Chennai. You will coordinate incident response, tool configuration, and SIEM rule development while leading threat hunting and IOC analysis.

The role includes onboarding security technologies, conducting risk assessments, and guiding change management with a focus on reducing incidents and improving detection.

Qualifications

• 7+ years in IT Security Operations
• Experience in SOC leadership and hands-on tool management
• Certifications such as CISSP, CEH, GCIH or CISM preferred

Responsibilities

• Oversee L1-L3 SOC operations, alert triage, incident investigations, shift handovers, and SLA performance management.
• Lead Sev1 and Sev2 incident response bridges for containment, eradication, recovery, and RCA.
• Configure, tune, and troubleshoot security controls across Web Filter, EDR, IPS, perimeter, and endpoint tooling.
• Develop, test, and refine SIEM detection rules and playbooks to minimize false positives.
• Conduct threat hunting and IOC analysis using current threat intelligence.
• Perform malware triage and coordinate advanced analysis activities.
• Own security technology onboarding from POC to production deployment.
• Plan and execute security tool migrations, log integrations, and documentation.

Skills

SOC leadership

Incident response

Threat hunting

Stakeholder management

Education

Bachelor's degree in CS/IT or related field

Tools

SIEM platforms

EDR

IPS

Web filtering

Network Traffic Analysis

Job description

Roles and Responsibilities

• Oversee L1-L3 SOC operations, alert triage, incident investigations, shift handovers, and SLA performance management.
• Lead Sev1 and Sev2 critical incident response bridges to execute containment, eradication, recovery, and post-incident RCA.
• Configure, tune, and troubleshoot security controls across Web Filter, EDR, IPS, perimeter, and endpoint tools.
• Develop, test, and refine SIEM detection rules, use cases, and operational playbooks to minimize false positives.
• Conduct hypothesis-driven threat hunting and IOC analysis using current threat intelligence.
• Perform malware triage in controlled environments and direct advanced analysis activities.
• Own security technology onboarding from POC success criteria through production deployment and operational acceptance.
• Plan and execute security tool migrations, policy mappings, log integrations, cutovers, and documentation.
• Direct change management procedures, risk impact assessments, rollback strategies, and post-change validations.
• Coach, mentor, and train L1-L3 security analysts, leading daily operational calls and performance reviews.
• Maintain runbooks, audit evidence, and compliance documentation while tracking risk remediation to closure.
• Communicate incident progress, technical decisions, and operational risks to client IT and key business stakeholders.

Preferred Candidate Profile

• Experience: 7+ years in IT Security Operations, SOC leadership, and hands-on tool management.
• Technical Expertise: Strong knowledge of SOC/SIEM platforms, EDR, IPS, Web Filtering, Network Traffic Analysis, and IOC investigation.
• Operations & Delivery: Experience managing major incident bridges, threat hunting, detection engineering, and technology migrations.
• Certifications: Preferred security certifications (e.g., CISSP, CEH, GCIH, CISM, or platform-specific certifications).
• Soft Skills: Strong investigative mindset, structured troubleshooting, effective team coaching, and stakeholder management.