Cyber Security Team Lead

Carelon Global Solutions; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Carelon Global Solutions is looking for a Cyber Security-Team Lead in Bengaluru, India. The ideal candidate will manage a team focused on Cyber Security Threat Management, leading investigations into escalated security incidents and driving process improvements. Candidates must possess a BS/BA in a relevant field and have at least 5 years of experience in Cyber Security with strong leadership skills.

The role requires effective communication skills and a deep understanding of security tools and the MITRE ATT&CK framework. The position is full-time and offers a senior level experience opportunity.

Qualifications

• 5+ years of experience in investigating and remediating Cyber Security Incidents.
• Strong communication skills for explaining technical details.
• Experience in leading incident response teams.

Responsibilities

• Investigate security incidents and manage a team of analysts and engineers.
• Improve processes by recommending necessary changes.
• Lead incident response during critical situations.

Skills

MITRE ATT&CK framework

EDR tools

Splunk

Network/Email Security tools

Effective communication skills

Education

BS/BA in Cyber Security, Information Technology, or Computer Science

Job description

Position Title:

Cyber Security-Team Lead

Job Family:

IFT > Engineering

Job Responsibilities

This role is for Cyber Security Threat Management, investigating escalated (tier 2) security incidents, driving process improvement by making recommendations for automation changes and detection logic tuning, remediating vulnerability findings discovered in threat hunts, and other responsibilities necessary to support the CSTM/CSOC. This is a people‑manager and technical expert role responsible for a team of analysts and engineers.

Qualifications

This position requires a BS/BA degree in Cyber Security, Information Technology, Computer Science or a similar major and at least 5 years of proven experience in investigating and remediating Cyber Security Incidents; or any combination of education and experience that would provide an equivalent background.

Effective communication skills supporting the ability to communicate highly technical details in layman’s terms are required. Proven experience that demonstrates the ability to understand and investigate complex cyber security incidents.

Experience

• Minimum 5 years of experience in investigating security incidents such as malicious software, phishing emails, and malicious websites using EDR tools, host-based analysis, data platforms such as Splunk, and network or email security tools.
• In-depth understanding of the MITRE ATT&CK framework and experience applying the framework to active investigations to enrich findings.
• Proven experience investigating and mitigating threats from known threat actor groups or known malicious software and the ability to identify them in high‑stress environments.
• Proven experience filling a leadership role in a Security Operations Center environment with strong communication skills.
• Proven experience leading incident response teams during critical incidents and in high‑stress environments.

Skills and Competencies

Primary Skills:

• MITRE ATT&CK framework
• EDR tools
• Splunk & Network/Email Security tools

Investigating tier‑2 security and behavioral based incidents.

Managing security analysts & engineers in various duties including but not limited to triaging and investigating security and behavioral based alerts, monitoring security tool health, maintaining security posture by enforcing security policies, and responding to inquiries and security‑related escalations.

Ensuring high quality output by reviewing tier‑1 analyst work, providing feedback and coaching team members toward a high level of performance.

Scheduling shift work to provide coverage for overnight, weekend, and holiday shifts.

Writing performance reviews, conducting new‑hire interviews, providing job training, and other duties necessary to ensure staff growth and development.

Assisting with security incident escalations from the Cyber Security Incident Response Team and Threat Hunting Team.

Monitoring security tool health and responding to outages.

Assisting with tuning of detection logic and automation to improve security posture.

Developing response actions and playbooks for established use cases.

Equal Opportunity Employer

Carelon is committed to a diverse and inclusive workplace and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics.

Reasonable Accommodation

Our inclusive culture empowers Carelon to deliver the best results for our customers. We not only celebrate the diversity of our workforce, but we also celebrate the diverse ways we work. If you have a disability and need accommodation such as an interpreter or a different interview format, please ask for the Reasonable Accommodation Request Form.

Job Type

Full time – Experience Level: Senior Level