Cyber Security Lead-Cyber Security Analyst

Sopra Steria; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Sopra Steria is looking for an L3 Cybersecurity Operations Coordinator based in Dadri, Uttar Pradesh, to act as a key link between local teams and global cybersecurity operations.

This role involves incident response, escalation management, and stakeholder coordination. Ideal candidates will have 8-10 years of experience and an engineering degree, along with necessary cybersecurity certifications.

Support will be provided 24x7, fostering an inclusive environment.

Qualifications

• 08-10 years total experience expected.
• Mandatory certifications include SC-200: Microsoft Security Operations Analyst, BLT1: Blue Team Level 1, and GCIH or GCFE/GCFA.

Responsibilities

• Act as primary cybersecurity contact for local sites.
• Coordinate with global SOC/CDOC teams for operational alignment.
• Lead incident triage, mitigation tracking, and remediation follow-up.

Skills

SOC / CDOC Operations

CSIRT Coordination

Incident Response (L3 / Advanced)

Cyber Incident Management & Escalation

Threat Mitigation & Remediation

Crisis Management

Stakeholder Management

Security Operations (SIEM, Sentinel, Logic Apps)

Risk & Impact Alignment

Process Improvement & Automation

Education

Engineering degree (B.E. / B Tech in I.T or Computer Engineering)

Tools

SIEM platform: Microsoft Sentinel, QRadar or Splunk/ELK

EDR platform: CrowdStrike and/or Defender

Logic Apps, SOAR platforms, Threat intel platforms (MISP / OpenCTI)

Job description

About Sopra Steria

Sopra Steria, a major Tech player in Europe with 51,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end‑to‑end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2025, the Group generated revenues of €5.6 billion.

Job Description

Role Overview

• L3 Cybersecurity Operations Coordinator acting as a CSIRT/SOC relay between local business teams and global CDOC
• Ensures rapid incident response, escalation management, and stakeholder coordination
• Bridges business, functional, and technical cybersecurity operations

Cybersecurity Operations & Coordination

• Act as primary cybersecurity contact for local sites
• Coordinate with global SOC/CDOC teams for operational alignment
• Ensure proximity-based support for critical assets and business priorities

Incident Response & Escalation Management

• Handle L3 incident escalation and complex case coordination
• Lead incident triage, mitigation tracking, and remediation follow-up
• Support end-to-end incident lifecycle (detection - containment - recovery)

Advanced Incident Handling (L3 Support)

• Manage critical and non-standard cybersecurity incidents
• Lead containment, threat eradication, and system restoration
• Validate secure remediation and recovery actions

Crisis & Major Incident Management

• Support CSIRT-led crisis management during major cyber incidents
• Coordinate cross-functional response during high-impact events

Stakeholder Management & Communication

• Act as bridge between technical teams and business stakeholders
• Ensure bi-directional communication (site and SOC/CDOC)
• Provide status updates, impact analysis, and action visibility

Requirements Translation & Solution Alignment

• Translate business/security requirements into technical controls
• Support global cybersecurity solution alignment with local constraints

Continuous Improvement & Process Optimization

• Drive SOC/CDOC process improvements and operational efficiency
• Promote best practices, knowledge sharing, and service enhancement

Key Skills & Competencies

• SOC / CDOC Operations
• CSIRT Coordination
• Incident Response (L3 / Advanced)
• Cyber Incident Management & Escalation
• Threat Mitigation & Remediation
• Crisis Management
• Stakeholder Management
• Security Operations (SIEM, Sentinel, Logic Apps)
• Risk & Impact Alignment
• Process Improvement & Automation

Total Experience Expected: 08-10 years

Qualifications

• Engineering graduate - preferably B.E. /B tech in I.T or Computer Engineering

Mandatory Certification

• SC-200: Microsoft Security Operations Analyst
• BLT1: Blue Team Level 1
• GCIH or GCFE/GCFA (or equivalent to IR credential)

Good to have

• CISSP/CISM

Tools & Technologies

• SIEM platform: Microsoft Sentinel, QRadar or Splunk/ELK
• EDR platform: CrowdStrike and/or Defender
• Large enterprise or critical infrastructure with IT/OT boundaries
• Logic Apps, SOAR platforms, Threat intel platforms (MISP / OpenCTI)
• Automotive or manufacturing, OT/ICS security, experience in 24/7 SOC

Support Hours 24x7 to be followed

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences. All of our positions are open to people with disabilities.