Cybersecurity Operations Manager

Skylo Technologies; Bengaluru; Hybrid; INR 3,000,000 - 6,000,000; Full time

Benefits offered by this job

Stock options

Benefits plan

Wellness & education allowance

Generous time off

Work abroad opportunities

Global team access

Inclusive culture

Job summary

Skylo Technologies in Bengaluru, India, is seeking a Cybersecurity Manager to build and lead our SOC from the ground up, covering detection, monitoring, incident response, and threat management across satellite networks and enterprise systems. You will shape tooling, processes, and team structure in a greenfield environment.

You will drive 24/7 coverage, run proactive CTI, and partner with Network Ops, Product Security, Cloud Security, and GRC to deliver secure, scalable connectivity.

Qualifications

• 8+ years in security operations/incident response, with 2+ years in a SOC leadership or team-lead role
• Hands-on experience standing up or maturing a SOC in scaling/greenfield environments
• Deep familiarity with SIEM/EDR/XDR platforms (e.g., Splunk, Sentinel, CrowdStrike, SentinelOne)
• Strong incident response fundamentals: forensics, threat hunting, containment
• Experience building/running a Cyber Threat Intelligence function for critical infra
• Understanding of cyber fusion center concepts for unified detection-to-response workflows
• Experience building 24/7 or follow-the-sun coverage models
• Familiarity with ISO 27001, NIS2, SOC 2 requirements
• People management: hiring, mentoring, scaling technical teams
• Strong stakeholder communication to executives
• Bonus: telco/satellite/critical infrastructure background

Responsibilities

• Build and lead Skylo's Cyber Fusion Center, including staffing, 24/7 coverage, and escalation processes
• Own SIEM/EDR/XDR stack — deployment, tuning, use-case development, detection engineering
• Lead incident response: triage, containment, root cause, and post-incident reporting
• Define and mature SOC processes — runbooks, playbooks, escalation paths, metrics
• Mentor SOC analysts and scale the team
• Partner with Network Ops, Product Security, Cloud Security, and GRC for unified visibility
• Stand up a Cyber Threat Intelligence capability — sourcing, curating, and operationalizing IOCs
• Translate CTI into detection content and risk briefings for leadership
• Report SOC metrics and risk posture to Head of InfoSec and execs
• Support ISO 27001, NIS2, and related controls evidence gathering
• Build automated/SOAR responses for thematic incidents

Skills

SOC leadership

Incident response

SIEM/EDR/XDR

Threat intel

Threat hunting

CTI capability

ISO 27001

Stakeholder comms

24/7 coverage

Tools

Splunk

Sentinel

CrowdStrike

SentinelOne

SOAR

Job description

The world still has coverage blind spots. You could help eliminate them at Skylo.

Skylo has pioneered a standards-based approach to satellite connectivity. We connect smartphones and IoT devices directly to satellites. No special hardware, no entirely new networks. Just billions of existing devices, suddenly reachable anywhere on Earth. We're not building toward this future. We're already in it.

Our direct-to-device service is live on millions of activated devices across five continents, covering more than 72 million square kilometers, in partnership with leading satellite operators, mobile network operators, Tier-1 chipset makers, and OEMs worldwide. And we're just getting started.

At the heart of it all is Skylo's commercial NTN vRAN: a 3GPP standards-based, cloud-native platform that seamlessly bridges terrestrial and satellite networks. It's the infrastructure that makes true anywhere, anytime connectivity possible.

When you join Skylo, you'll work at the intersection of three markets reshaping how the world stays connected: mass-market consumer devices, automotive, and industrial IoT. Enabling people outdoors and critical workflows in the world's most remote places.

This is a rare chance to work on technology that matters, at a company that's already proving it works

This role is located in Bangalore, India where we are onsite 3 days a week in office.

Summary Of How You Will Impact Skylo

Skylo is building satellite-to-device (NTN) connectivity infrastructure connecting mobile network operators worldwide. Security Operations is the most critically understaffed pillar in our InfoSec build-out relative to its 24/7 mandate, and we're hiring a Cybersecurity Manager to stand up and lead this function from the ground up — covering detection, monitoring, incident response, and threat management across our satellite network, ground infrastructure, and enterprise systems. You'll build the SOC function from scratch rather than inherit one — shaping tooling, process, and team structure for a company defining a new category of critical connectivity infrastructure.

How You Will Contribute

• Build and lead Skylo's Cyber Fusion Center function, including staffing model, shift/coverage strategy, and escalation processes for 24/7 monitoring

• Own the SIEM/EDR/XDR stack — deployment, tuning, use-case development, and detection engineering

• Lead incident response: triage, containment, root cause, and post-incident reporting for security events across cloud, corporate IT, data center and product environments

• Define and mature SOC processes — runbooks, playbooks, escalation paths, and metrics (MTTD, MTTR, alert fidelity)

• Manage and mentor SOC analysts as the team scales through phased hiring

• Partner with Network Operation, Product Security, Cloud Security, and GRC to ensure shared visibility and coordinated response

• Stand up a Cyber Threat Intelligence (CTI) capability — sourcing, curating, and operationalizing threat feeds and IOCs relevant to telco/satellite/NTN threat actors

• Translate CTI into proactive detection content, threat hunting hypotheses, and risk briefings for leadership

• Report SOC metrics and risk posture to Head of InfoSec and leadership; contribute to exec-level reporting

• Support compliance evidence gathering for ISO 27001, NIS2, and other frameworks tied to detection and response controls

• Good understanding of MITRE ATT&CK, FiGHT, D3FEND, IOC analysis, and threat detection.

• Build automated/SOAR response on thematic incidents

What We're Looking For

• 8+ years in security operations/incident response, with 2+ years in a SOC leadership or team-lead role

• Hands-on experience standing up or significantly maturing a SOC function, ideally in a scaling or greenfield environment

• Deep familiarity withSIEM/EDR/XDR platforms (e.g., Splunk, Sentinel, CrowdStrike, SentinelOne) — deployment and tuning, not just operation

• Strong incident response fundamentals: forensics, threat hunting, containment strategy

• Experience building or running a Cyber Threat Intelligence function — feed sourcing/curation, IOC management, and threat actor tracking relevant to critical infrastructure

• Understanding of cyber fusion center concepts — integrating SOC, CTI, IR, and vulnerability management functions for unified detection-to-response workflows

• Experience building 24/7 or follow-the-sun coverage models

• Familiarity with compliance frameworks relevant to telco/critical infrastructure (ISO 27001, NIS2, SOC 2)

• People management experience — hiring, mentoring, and scaling a technical team

• Strong stakeholder communication — comfortable presenting risk and incident status to executive leadership

• Bonus: experience in telco, satellite, or other regulated critical-infrastructure environments

What We Offer

With employees working across three continents, Skylo is proud to be an equal opportunity employer dedicated to building an inclusive and diverse workforce. Our worldwide and inclusive culture encourages a flexible approach to work, and we also offer an attractive range benefits such as:

• Competitive compensation packages including a stock option based equity program

• Comprehensive benefits plan

• Monthly allowances for wellness and education reimbursement

• A generous time off policy, holidays, and the opportunity to temporarily work abroad

• Once in a lifetime opportunity to be a part of developing and running world’s first commercial, live direct-to-device satellite network and service

• Access to world-class team and talent across tech domains: software, hardware, chipsets, telecom, satellite and network virtualization

• Open, transparent, inclusive culture that blends the Silicon Valley, Nordic and South Asia characteristics

EEO Statement

Skylo is an equal-opportunity employer and we celebrate diversity. We do not discriminate on the basis of race, religion, color, ancestry, national origin, caste, sex, sexual orientation, parent or caregiver status, political affiliation, gender, gender identity or expression, age, disability, medical condition, pregnancy, genetic makeup, marital status, or military service consistent with applicable federal, state, and local laws.

We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. Please let us know if you need assistance or accommodation due to a disability.