Cyber Security Operations Manager

VFS Global; Mumbai; Hybrid; INR 1,500,000 - 2,200,000; Full time

Job summary

VFS Global seeks a Security Operations Manager to lead day-to-day security monitoring and incident response across our global environment. The role will optimize and govern the cyber security ecosystem, including SIEM, XDR, Cloud & Identity Security monitoring, SOAR automation, UEBA, and security log monitoring from servers, security platforms, network, and firewall infrastructure.

The individual will also manage and govern the performance of our MSSP partner to ensure effective threat

Qualifications

• Graduate degree or global equivalent.
• Professional certifications such as CISSP or ITIL preferred.

Responsibilities

• Manage and enhance security operations of primary SIEM platforms.
• Monitor, tune, and improve detection use cases across XDR, Endpoint, Identity, Cloud, and SAS platforms.
• Lead incident triage, investigation, containment, and response activities.
• Develop and optimize SOAR playbooks, automation workflows, and UEBA-based detection use cases.
• Oversee ingestion, correlation, and analysis of server, firewall, network, cloud, and endpoint logs.
• Manage day-to-day operations of the Managed Security Services Provider (MSSP), including SLA compliance, quality reviews, incident oversight, and service governance.
• Drive threat hunting, detection engineering, use‑case development, and continuous improvement initiatives.
• Track security operations KPIs such as MTTD, MTTR, alert quality, detection coverage, and SOC effectiveness.
• Collaborate with IT, Infrastructure, Cloud, and Information Security teams to strengthen security posture.
• Promote judicious use of natural resources.
• Follow ABMS roles and responsibilities as prescribed on the ABMS manual.

Skills

Security operations

Incident response

SIEM

XDR

SOAR

UEBA

MSSP management

Threat hunting

Cloud security

Log analysis

Education

Graduate degree

CISSP

ITIL

Tools

SIEM platforms

SOAR platforms

XDR tools

Job description

Role & responsibilities

The Security Operations Manager will lead day-to-day security monitoring and incident response operations across our global environment. The role will be responsible for optimizing and governing the cyber security ecosystem, including SIEM, XDR, Cloud & Identity Security monitoring, SOAR automation, UEBA, and security log monitoring from Servers, Security platforms, Network, and Firewall infrastructure.

The individual will also manage and govern the performance of our Managed Security Operations (MSSP) partner to ensure effective threat detection, response, and continuous security improvement.

Security Operations & TI

• Manage and enhance security operations of primary SIEM platforms.
• Monitor, tune, and improve detection use cases across XDR, Endpoint, Identity, Cloud, and SAS platforms.
• Lead incident triage, investigation, containment, and response activities.
• Develop and optimize SOAR playbooks, automation workflows, and UEBA-based detection use cases.
• Oversee ingestion, correlation, and analysis of server, firewall, network, cloud, and endpoint logs.
• Manage day-to-day operations of the Managed Security Services Provider (MSSP), including SLA compliance, quality reviews, incident oversight, and service governance.
• Drive threat hunting, detection engineering, use‑case development, and continuous improvement initiatives.
• Track security operations KPIs such as MTTD, MTTR, alert quality, detection coverage, and SOC effectiveness.
• Collaborate with IT, Infrastructure, Cloud, and Information Security teams to strengthen security posture.

Sustainability

• Promote judicious use of natural resources.
• Adhere to the organizations environment, health, and safety policies, objectives, and guidelines.

Anti Bribery Management Systems (ABMS)

• Follow the ABMS roles and responsibilities details as prescribed on the ABMS manual.

a. Understanding of ethical standards and the importance of integrity in business practices.

b. Ability to identify and evaluate risks related to bribery in various business contexts. For more detailed explanation, follow the ABMS manual.

For more detailed explanation, follow the ABMS manual.

Education

• Graduate degree or its global equivalent; professional certifications such as MCP, CISSP, or ITIL are preferred.

Experience

• 48 years of experience in Cyber Security, Operations or SOC function.
• Strong understanding of Cyber Technologies, Incident management & Blue Teaming Exercises.